Fallos del tipo CWE-787

5729 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2020-17404HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%CVE-2022-3699HIGH A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior toEPSS 4.2%CVE-2020-24411HIGHAdobe Illustrator PDF File Parsing Out-Of-Bounds Write VulnerabilityEPSS 4.2%CVE-2019-1213CRITICALWindows DHCP Server Remote Code Execution VulnerabilityEPSS 4.2%CVE-2018-20253—In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive EPSS 4.2%CVE-2025-2761HIGHGIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.2%CVE-2022-41674HIGHAn issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80EPSS 4.1%CVE-2021-21054HIGHAdobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 4.1%CVE-2019-10961—In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supEPSS 4.1%CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2022-31003CRITICALHeap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIPEPSS 4.1%CVE-2022-24091HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.1%CVE-2020-10825CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300BEPSS 4.1%CVE-2020-10824CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices beforEPSS 4.1%CVE-2024-20756HIGHAdobe Bridge 2024 Out of Bound Write Remote Code Execution VulnerabilityEPSS 4.1%CVE-2021-21094HIGHAdobe Bridge PDF File Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code executionEPSS 4.0%CVE-2021-21095HIGHAdobe Bridge TTF Font Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code executionEPSS 4.0%CVE-2022-39260HIGHGit vulnerable to Remote Code Execution via Heap overflow in `git shell`EPSS 4.0%CVE-2021-21052HIGHAdobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 4.0%CVE-2021-28622HIGHAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.0%