Fallos del tipo CWE-787

5843 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2023-6231CRITICALBuffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netwoEPSS 1.4%CVE-2023-6234CRITICALBuffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attackEPSS 1.4%CVE-2023-6233CRITICALBuffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the nEPSS 1.4%CVE-2023-6229CRITICALBuffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on EPSS 1.4%CVE-2020-0069HIGHIn the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization aEPSS 1.4%KEVCVE-2026-107815HIGHMariaDB: one byte OOB write in DOS tables of the CONNECT engineEPSS 1.4%CVE-2017-2580MEDIUMAn out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or poEPSS 1.4%CVE-2022-3627MEDIUMLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:686EPSS 1.4%CVE-2026-28780CRITICALApache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()EPSS 1.4%CVE-2026-40033HIGHFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypassEPSS 1.4%CVE-2021-1573HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilityEPSS 1.4%CVE-2021-34704HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilityEPSS 1.4%CVE-2023-40186MEDIUMIntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDPEPSS 1.4%CVE-2021-1590MEDIUMCisco NX-OS Software system login block-for Denial of Service VulnerabilityEPSS 1.4%CVE-2023-24797CRITICALD-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers tEPSS 1.4%CVE-2023-27720CRITICALD-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a EPSS 1.4%CVE-2022-47385HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2022-47386HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2023-47359—Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() anEPSS 1.3%CVE-2022-46696HIGHA memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iEPSS 1.3%