Fallos del tipo CWE-787

5210 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2024-34086HIGHA vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), TeamceEPSS 0.2%CVE-2024-52570HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2026-12519MEDIUMOut-of-bounds stack read and write in Zephyr WNC-M14A2A modem socket-notify parsingEPSS 0.2%CVE-2022-32961MEDIUMHiCOS’ client-side citizen digital certificate - Stack Buffer OverflowEPSS 0.2%CVE-2022-32960MEDIUMHiCOS’ client-side citizen digital certificate - Stack Buffer OverflowEPSS 0.2%CVE-2024-52565HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2022-32959MEDIUMHiCOS’ client-side citizen digital certificate - Stack Buffer OverflowEPSS 0.2%CVE-2023-3487HIGHInteger overflow in Silicon Labs Gecko Bootloader leads to unbounded memory accessEPSS 0.2%CVE-2026-87118MEDIUMBotslab G980H Dashcams Out-of-bounds WriteEPSS 0.2%CVE-2023-23579HIGHDatakit CrossCAD/WareEPSS 0.2%CVE-2024-52566HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2022-42281MEDIUMNVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bEPSS 0.2%CVE-2022-35217HIGHNHI card’s web service component - Stack-based Buffer Overflow-1EPSS 0.2%CVE-2025-47108HIGHSubstance3D - Painter | Out-of-bounds Write (CWE-787)EPSS 0.2%CVE-2025-46715HIGHSandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)EPSS 0.2%CVE-2024-58069HIGHrtc: pcf85063: fix potential OOB write in PCF85063 NVMEM readEPSS 0.2%CVE-2024-0110MEDIUMNVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed EEPSS 0.2%CVE-2024-11157HIGHRockwell Automation Third Party Vulnerability in ArenaEPSS 0.2%CVE-2026-92179HIGHpdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2023-0199MEDIUMNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can EPSS 0.2%