Fallos del tipo CWE-787

5843 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2021-20986HIGHHilscher: Denial of Service vulnerability in PROFINET IO DeviceEPSS 1.1%CVE-2022-20607HIGHIn the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executEPSS 1.0%CVE-2023-34624HIGHAn issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted objecEPSS 1.0%CVE-2022-28550CRITICALMatthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer EPSS 1.0%CVE-2022-3890CRITICALHeap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the rendeEPSS 1.0%CVE-2024-54534HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS SeEPSS 1.0%CVE-2022-3775HIGHWhen rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained EPSS 1.0%CVE-2022-44200CRITICALNetgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.EPSS 1.0%CVE-2022-35039MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e20a0.EPSS 1.0%CVE-2022-35063MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8.EPSS 1.0%CVE-2022-44199CRITICALNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.EPSS 1.0%CVE-2022-44198CRITICALNetgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.EPSS 1.0%CVE-2022-36660CRITICALxhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().EPSS 1.0%CVE-2024-7532HIGHOut of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruptioEPSS 1.0%CVE-2022-44109CRITICALpdftojson commit 94204bb was discovered to contain a stack overflow via the component Stream::makeFilter(char*, Stream*, Object*, int).EPSS 1.0%CVE-2022-44108CRITICALpdftojson commit 94204bb was discovered to contain a stack overflow via the component Object::copy(Object*):Object.cc.EPSS 1.0%CVE-2022-35064MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in __asan_memset.EPSS 1.0%CVE-2022-35061MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a.EPSS 1.0%CVE-2022-35037MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e.EPSS 1.0%CVE-2022-35038MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d.EPSS 1.0%