Fallos del tipo CWE-787

5210 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2023-44081HIGHA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllEPSS 0.2%CVE-2026-71972MEDIUMU-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 DecoderEPSS 0.2%CVE-2018-25228MEDIUMNetSetMan 4.7.1 Workgroup Buffer Overflow Denial of ServiceEPSS 0.2%CVE-2026-21298HIGHSubstance3D - Modeler | Out-of-bounds Write (CWE-787)EPSS 0.2%CVE-2025-7238HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-9275HIGHOxford Instruments Imaris Viewer IMS File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7980HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2018-25217HIGHPDF Explorer 1.5.66.2 Structured Exception Handler Local Code ExecutionEPSS 0.2%CVE-2025-7258HIGHIrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7234HIGHIrfanView CADImage Plugin CGM File Parsing Out-of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7235HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7231HIGHINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7260HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-25584HIGHiccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()EPSS 0.2%CVE-2022-42262HIGHNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may leaEPSS 0.2%CVE-2026-0659HIGHUSD File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.2%CVE-2017-20228HIGHFlat Assembler 1.71.21 Stack-Based Buffer Overflow ROPEPSS 0.2%CVE-2026-0875HIGHMODEL File Parsing Out-of-Bounds WriteEPSS 0.2%CVE-2023-30382HIGHA buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privilegeEPSS 0.2%CVE-2026-0874HIGHCATPART File Parsing Out-of-Bounds WriteEPSS 0.2%