Fallos del tipo CWE-787

5210 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2024-45320MEDIUMOut-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw EPSS 0.2%CVE-2025-24451HIGHSubstance3D - Painter | Out-of-bounds Write (CWE-787)EPSS 0.2%CVE-2024-31858HIGHOut-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enEPSS 0.2%CVE-2026-20403MEDIUMIn Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connectedEPSS 0.2%CVE-2026-24829MEDIUMOut-of-bounds write in is-EngineEPSS 0.2%CVE-2024-25578HIGHMicroDicom DICOM Viewer Out-of-Bounds WriteEPSS 0.2%CVE-2021-33137HIGHOut-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via EPSS 0.2%CVE-2026-1418MEDIUMGPAC SRT Subtitle Import text_to_bifs.c gf_text_import_srt_bifs out-of-bounds writeEPSS 0.2%CVE-2022-3379HIGH Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FEPSS 0.2%CVE-2024-53106HIGHima: fix buffer overrun in ima_eventdigest_init_commonEPSS 0.2%CVE-2023-0124HIGHCVE-2023-0124EPSS 0.2%CVE-2016-20044HIGHPInfo 0.6.9-5.1 Local Buffer Overflow via -m ParameterEPSS 0.2%CVE-2025-50054MEDIUMBuffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too laEPSS 0.2%CVE-2021-29571MEDIUMMemory corruption in `DrawBoundingBoxesV2`EPSS 0.2%CVE-2023-38681HIGHA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllEPSS 0.2%CVE-2022-48330HIGHA Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause buffer overflow. AffeEPSS 0.2%CVE-2024-20743HIGHAdobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write VulnerabilityEPSS 0.2%CVE-2025-4422HIGHEfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM moduleEPSS 0.2%CVE-2023-38680HIGHA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllEPSS 0.2%CVE-2024-20740HIGHAdobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write VulnerabilityEPSS 0.2%