Fallos del tipo CWE-787

5858 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2022-41191HIGHDue to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusEPSS 0.6%CVE-2022-41195—Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received fromEPSS 0.6%CVE-2026-13592MEDIUMliftoff-sr CIPster EtherNet IP Message append out-of-bounds writeEPSS 0.6%CVE-2024-48856CRITICALVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%CVE-2022-2081HIGHA vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and coEPSS 0.6%CVE-2022-38980CRITICALThe HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of thiEPSS 0.6%CVE-2023-32111HIGHMemory Corruption vulnerability in SAP PowerDesigner (Proxy)EPSS 0.6%CVE-2026-97631CRITICALPre-boot RCE in EDK II PXE driverEPSS 0.6%CVE-2025-20681CRITICALIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegEPSS 0.6%CVE-2025-20684CRITICALIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegEPSS 0.6%CVE-2026-93011MEDIUMDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsEPSS 0.6%CVE-2026-10883HIGHType Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a craftEPSS 0.6%CVE-2026-10881CRITICALOut of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escEPSS 0.6%CVE-2023-46761—Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.EPSS 0.6%CVE-2023-46760HIGHOut-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.EPSS 0.6%CVE-2022-2320—A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results frEPSS 0.6%CVE-2026-17255MEDIUMIBM i is Affected By Denial of Service Vulnerability []EPSS 0.6%CVE-2026-16958MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.6%CVE-2026-17168HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.6%CVE-2026-116569HIGHFreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsingEPSS 0.6%