Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2020-37208MEDIUMSpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of ServiceEPSS 0.5%CVE-2026-8975HIGHMemory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151EPSS 0.5%CVE-2026-121617HIGHLinksys E5600 Header upload_fw.cgi init_multipart out-of-bounds writeEPSS 0.5%CVE-2022-41992HIGHA memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-EPSS 0.5%CVE-2023-42127HIGHKofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-0143MEDIUMZoom Workplace Apps for Linux - Out-of-bounds WriteEPSS 0.5%CVE-2021-3697—A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a succeEPSS 0.5%CVE-2026-85091HIGHzlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed WriteEPSS 0.5%CVE-2021-43529CRITICALThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. ThundeEPSS 0.5%CVE-2026-116572MEDIUMFreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-nameEPSS 0.5%CVE-2026-43676MEDIUMAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7EPSS 0.5%CVE-2026-93393CRITICALHeap overflow via oversized decrypted TLS record sequence in Windows Secure Channel streamEPSS 0.5%CVE-2025-64129HIGHZenitel TCIV-3+ Out-of-bounds WriteEPSS 0.5%CVE-2026-85670HIGHtokenizers BpeBuilder Buffer Overflow via merge tokenEPSS 0.5%CVE-2026-110680HIGHCpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hvEPSS 0.5%CVE-2023-24039HIGHA stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via tEPSS 0.5%CVE-2024-28562MEDIUMBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::cEPSS 0.5%CVE-2026-62871HIGH.NET Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-68806HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-56851HIGHPanic parsing crafted input in x/text/secure/precis in golang.org/x/textEPSS 0.5%