Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2026-124739HIGHBusybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.confEPSS 0.5%CVE-2023-38072HIGHA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), TeamcenEPSS 0.5%CVE-2026-101976HIGHJunos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crashEPSS 0.5%CVE-2026-3849MEDIUMBuffer Overflow in HPKE via Oversized ECH ConfigEPSS 0.5%CVE-2020-36964HIGHYATinyWinFTP - Denial of ServiceEPSS 0.5%CVE-2026-77555HIGHA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exEPSS 0.5%CVE-2022-48176HIGHNetgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to EPSS 0.5%CVE-2026-95862HIGHA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exEPSS 0.5%CVE-2026-15057HIGHIBM WebSphere Application Server Liberty is affected by a denial of service vulnerabilityEPSS 0.5%CVE-2026-79043CRITICALOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsideEPSS 0.5%CVE-2026-88407HIGHAn out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers EPSS 0.5%CVE-2026-116573MEDIUMFreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header userEPSS 0.5%CVE-2024-0446HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.5%CVE-2025-68381MEDIUMPacketbeat Improper Bounds CheckEPSS 0.5%CVE-2025-12026HIGHWatchGuard Firebox Authenticated Out of Bounds Write in certdEPSS 0.5%CVE-2021-1368HIGHCisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrary Code Execution VulnerabilityEPSS 0.5%CVE-2022-38977HIGHThe HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resultiEPSS 0.5%CVE-2026-95357CRITICALOut of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary EPSS 0.5%CVE-2024-20746HIGHAdobe Premiere Pro Out-of-bounds Write Arbitrary code executionEPSS 0.5%CVE-2022-42416HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.5%