Fallos del tipo CWE-787

5133 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2020-17412HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaEPSS 4.2%CVE-2021-21071HIGHAdobe Animate memory corruption vulnerabilityEPSS 4.2%CVE-2019-10961—In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supEPSS 4.1%CVE-2022-24091HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.1%CVE-2020-10825CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300BEPSS 4.1%CVE-2020-10824CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices beforEPSS 4.1%CVE-2024-20756HIGHAdobe Bridge 2024 Out of Bound Write Remote Code Execution VulnerabilityEPSS 4.1%CVE-2018-20253—In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive EPSS 4.0%CVE-2021-28622HIGHAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.0%CVE-2021-21054HIGHAdobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 4.0%CVE-2024-39423HIGHZDI-CAN-24182: New Vulnerability Report - Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 3.9%CVE-2023-48315HIGHAzure RTOS NetX Duo Remote Code Execution VulnerabilityEPSS 3.9%CVE-2022-41674HIGHAn issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80EPSS 3.9%CVE-2020-9907HIGHA memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An apEPSS 3.9%KEVCVE-2021-21094HIGHAdobe Bridge PDF File Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code executionEPSS 3.9%CVE-2021-21095HIGHAdobe Bridge TTF Font Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code executionEPSS 3.9%CVE-2020-16918HIGHBase3D Remote Code Execution VulnerabilityEPSS 3.9%CVE-2018-17692—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%CVE-2019-13323HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interacEPSS 3.9%CVE-2020-9674HIGHAdobe Bridge versions 10.0.3 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code exeEPSS 3.9%