Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2026-70458HIGHrsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED HandlingEPSS 0.4%CVE-2026-113160HIGHOut of bounds write in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbEPSS 0.4%CVE-2026-55958HIGHRenesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessageEPSS 0.4%CVE-2025-4050HIGHOut of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in EPSS 0.4%CVE-2022-41306HIGHA maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write accEPSS 0.4%CVE-2026-57194MEDIUMAsterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash AsteriskEPSS 0.4%CVE-2026-121513HIGHOut-of-bounds Write in µD3TNEPSS 0.4%CVE-2022-33255HIGHBuffer over-read in Bluetooth HOSTEPSS 0.4%CVE-2020-26312HIGHGHSL-2020-254: Arbitrary file read and/or write in dotmeshEPSS 0.4%CVE-2026-46520HIGHImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensionsEPSS 0.4%CVE-2026-54634HIGHHamlib: rigctld `send_raw` Stack Out-of-Bounds Write and Uninitialized Memory DisclosureEPSS 0.4%CVE-2026-18095HIGHIBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.4%CVE-2022-45283HIGHGPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c.EPSS 0.4%CVE-2025-47728HIGHFile Parsing Memory Corruption in CNCSoft-G2EPSS 0.4%CVE-2023-39490HIGHPDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11515HIGHIrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-47202CRITICALIn RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580EPSS 0.4%CVE-2026-28618HIGHIn dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no EPSS 0.4%CVE-2025-26596HIGHXorg: xwayland: heap overflow in xkbwritekeysyms()EPSS 0.4%CVE-2024-11517HIGHIrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%