Fallos del tipo CWE-787

5862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2026-17721CRITICALOut of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via aEPSS 0.4%CVE-2024-54523CRITICALThe issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOSEPSS 0.4%CVE-2026-10941HIGHOut of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sanEPSS 0.4%CVE-2026-14191HIGHWinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeaderEPSS 0.4%CVE-2019-25564MEDIUMPCHelpWareV2 1.0.0.5 Denial of Service via Group FieldEPSS 0.4%CVE-2026-107909HIGHPre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload lengthEPSS 0.4%CVE-2023-5779MEDIUMcan: out of bounds in remove_rx_filter functionEPSS 0.4%CVE-2026-1678CRITICALdns: memory‑safety issue in the DNS name parserEPSS 0.4%CVE-2022-35699HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-40393HIGHIn Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depenEPSS 0.4%CVE-2022-35700HIGHAdobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-20072MEDIUMIn wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege wEPSS 0.4%CVE-2022-48486HIGHConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2026-31968HIGHHTSlib CRAM decoder vulnerable to buffer overflowEPSS 0.4%CVE-2026-84698HIGHPX4 Autopilot sd_bench Heap Buffer Overflow via Block SizeEPSS 0.4%CVE-2022-2988MEDIUMA CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from EPSS 0.4%CVE-2024-20073MEDIUMIn wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege EPSS 0.4%CVE-2026-76840HIGHRustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse LengthEPSS 0.4%CVE-2023-42051HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-5317MEDIUMNothings stb stb_vorbis.c start_decoder out-of-bounds writeEPSS 0.4%