Fallos del tipo CWE-787

5145 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2023-24820HIGHRIOT-OS vulnerable to Integer Underflow during IPHC receiveEPSS 0.9%CVE-2023-24821HIGHRIOT-OS vulnerable to Integer Underflow during defragmentationEPSS 0.9%CVE-2022-40102HIGHTenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to EPSS 0.9%CVE-2026-33816CRITICALCVE-2026-33816 in github.com/jackc/pgxEPSS 0.9%CVE-2026-33815CRITICALCVE-2026-33815 in github.com/jackc/pgxEPSS 0.9%CVE-2022-40104HIGHTenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability allows attackers to EPSS 0.9%CVE-2023-33671CRITICALTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.EPSS 0.9%CVE-2022-3446HIGHHeap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption viaEPSS 0.9%CVE-2021-34569CRITICALWAGO I/O-Check Service prone to Out-of-bounds WriteEPSS 0.9%CVE-2021-22751—A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of iEPSS 0.9%CVE-2022-44156HIGHTenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.EPSS 0.9%CVE-2026-61674CRITICALFluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handlerEPSS 0.9%CVE-2022-3725MEDIUMCrash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture fileEPSS 0.9%CVE-2022-44169HIGHTenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.EPSS 0.9%CVE-2022-44167HIGHTenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.EPSS 0.9%CVE-2022-44163HIGHTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.EPSS 0.9%CVE-2022-44168HIGHTenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..EPSS 0.9%CVE-2022-44158HIGHTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.EPSS 0.9%CVE-2026-7829HIGHUltraVNC repeater authenticated out-of-bounds write in rule parser via oversized tokenEPSS 0.9%CVE-2022-1041HIGHOut-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioningEPSS 0.9%