Fallos del tipo CWE-788

147 resultados

Acesso de memória além do limite do buffer

A aplicação tenta acessar dados em um endereço de memória que está fora dos limites de um buffer alocado. Isso ocorre quando o código não valida corretamente o tamanho ou índice antes de ler/escrever, permitindo leitura de dados sensíveis ou corrupção de memória adjacente.

Ejemplo

Um servidor processa um pacote de rede e copia dados para um array de 256 bytes sem verificar o tamanho real do pacote. Se o pacote tiver 500 bytes, a cópia escreve 244 bytes além do buffer, sobrescrevendo variáveis locais ou dados de controle da pilha.

Cómo mitigar

Sempre validar e limitar o tamanho de leitura/escrita aos limites conhecidos do buffer antes de acessá-lo. Use funções seguras (como `strncpy` em C, ou linguagens com gerenciamento automático de memória), ou implemente verificações explícitas de limites e índices.

CVE-2020-9731HIGHOut-of-bounds memory access could lead to code executionEPSS 11.3%CVE-2021-21105HIGHAdobe Illustrator memory corruption vulnerability could lead to remote code executionEPSS 5.9%CVE-2021-21104HIGHAdobe Illustrator memory corruption vulnerability could lead to remote code executionEPSS 4.9%CVE-2021-21082HIGHAdobe Photoshop Memory CorruptionEPSS 4.5%CVE-2019-8280—UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution.EPSS 4.2%CVE-2021-21093HIGHAdobe Bridge SGI File Parsing Memory Corruption vulnerability could lead to arbitrary code executionEPSS 3.9%CVE-2021-21092HIGHAdobe Bridge DCM File Parsing Memory Corruption could lead to arbitrary code executionEPSS 3.9%CVE-2021-45067MEDIUMAdobe Acrobat Reader Memory Corruption could lead to Information DisclosureEPSS 3.9%CVE-2020-27738MEDIUMA vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <EPSS 3.7%CVE-2021-21103MEDIUMAdobe Illustrator memory corruption vulnerability could lead to information disclosureEPSS 3.3%CVE-2021-36052HIGHXMPToolkit SDK ImportTIFF_CheckStandardMapping Memory CorruptionEPSS 3.2%CVE-2019-8265—UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client codeEPSS 3.1%CVE-2019-8264—UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execEPSS 3.1%CVE-2020-9727HIGHOut-of-bounds memory access could lead to code executionEPSS 3.1%CVE-2021-36070HIGHAdobe Media Encoder Improper Memory Access When Parsing SVG Files Could Lead To Remote Code ExecutionEPSS 3.0%CVE-2021-36009HIGHAdobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 3.0%CVE-2021-44179HIGHAdobe Dimension GIF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 3.0%CVE-2021-35997HIGHAdobe Premiere Pro Memory Corruption Remote Code Execution VulnerabilityEPSS 2.9%CVE-2019-8266—UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer functEPSS 2.8%CVE-2020-24413HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%