Fallos del tipo CWE-787

5202 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2023-34823MEDIUMfdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c.EPSS 0.3%CVE-2025-27374MEDIUMAn issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 10EPSS 0.3%CVE-2026-65703HIGHFFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video DecoderEPSS 0.3%CVE-2024-39384HIGHPremiere Pro | Out-of-bounds Write (CWE-787)EPSS 0.3%CVE-2024-20782HIGHAdobe Indesign WMF File Parsing Out Of Bound WriteEPSS 0.3%CVE-2023-34970MEDIUMMali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsEPSS 0.3%CVE-2025-32008HIGHOut-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applications may allow a deEPSS 0.3%CVE-2023-25860HIGHAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-26373HIGHAdobe Dimension has an arbitrary address write vulnerability when parsing USDZ filesEPSS 0.3%CVE-2023-25870HIGHAdobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-22230HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-30272HIGHAdobe Illustrator 2024 GIF file parsing Out-Of-Bound Write remote code execution vulnerabiityEPSS 0.3%CVE-2023-3024MEDIUMBluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory accessEPSS 0.3%CVE-2023-25866HIGHAdobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-25861HIGHAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-21589HIGHAdobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-30271HIGHAdobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability III.EPSS 0.3%CVE-2023-34319HIGHLinux: buffer overrun in netback due to unusual packetEPSS 0.3%CVE-2024-27873MEDIUMAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 andEPSS 0.3%CVE-2026-12520MEDIUMStack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlersEPSS 0.3%