Fallos del tipo CWE-788

147 resultados

Acesso de memória além do limite do buffer

A aplicação tenta acessar dados em um endereço de memória que está fora dos limites de um buffer alocado. Isso ocorre quando o código não valida corretamente o tamanho ou índice antes de ler/escrever, permitindo leitura de dados sensíveis ou corrupção de memória adjacente.

Ejemplo

Um servidor processa um pacote de rede e copia dados para um array de 256 bytes sem verificar o tamanho real do pacote. Se o pacote tiver 500 bytes, a cópia escreve 244 bytes além do buffer, sobrescrevendo variáveis locais ou dados de controle da pilha.

Cómo mitigar

Sempre validar e limitar o tamanho de leitura/escrita aos limites conhecidos do buffer antes de acessá-lo. Use funções seguras (como `strncpy` em C, ou linguagens com gerenciamento automático de memória), ou implemente verificações explícitas de limites e índices.

CVE-2020-24414HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%CVE-2020-24412HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%CVE-2020-24413HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.8%CVE-2020-9730HIGHOut-of-bounds memory access could lead to code executionEPSS 2.7%CVE-2020-9729HIGHOut-of-bounds memory access could lead to code executionEPSS 2.7%CVE-2020-9728HIGHOut-of-bounds memory access could lead to code executionEPSS 2.7%CVE-2021-36049HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36059HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36067HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36078HIGHAdobe Bridge PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 2.7%CVE-2021-36069HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36068HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-36076HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-39817HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2021-39816HIGHAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 2.7%CVE-2020-24415HIGHAdobe Illustrator Memory Corruption VulnerabilityEPSS 2.7%CVE-2021-40733HIGHAdobe Animate Memory Corruption Could Lead To Arbitrary Code ExecutionEPSS 2.6%CVE-2021-27384CRITICALA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 UpdatEPSS 2.6%CVE-2021-42267HIGHAdobe Animate FLA File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.5%CVE-2021-36046HIGHXMP Toolkit SDK TIFF_MemoryReader::SortIFD function Memory CorruptionEPSS 2.5%