Fallos del tipo CWE-788

147 resultados

Acesso de memória além do limite do buffer

A aplicação tenta acessar dados em um endereço de memória que está fora dos limites de um buffer alocado. Isso ocorre quando o código não valida corretamente o tamanho ou índice antes de ler/escrever, permitindo leitura de dados sensíveis ou corrupção de memória adjacente.

Ejemplo

Um servidor processa um pacote de rede e copia dados para um array de 256 bytes sem verificar o tamanho real do pacote. Se o pacote tiver 500 bytes, a cópia escreve 244 bytes além do buffer, sobrescrevendo variáveis locais ou dados de controle da pilha.

Cómo mitigar

Sempre validar e limitar o tamanho de leitura/escrita aos limites conhecidos do buffer antes de acessá-lo. Use funções seguras (como `strncpy` em C, ou linguagens com gerenciamento automático de memória), ou implemente verificações explícitas de limites e índices.

CVE-2021-40757HIGHAdobe After Effects MXF File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.1%CVE-2021-40710HIGHAdobe Premiere Pro 2021 SVG File Parsing Leads to Memory CorruptionEPSS 2.1%CVE-2021-40755HIGHAdobe After Effects SGI File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.1%CVE-2021-40715HIGHAdobe Premiere Pro 2021 EXR File Parsing Leads to Memory CorruptionEPSS 2.1%CVE-2021-43012HIGHAdobe Prelude M4A file memory corruption vulnerability could lead to remote code executionEPSS 2.1%CVE-2021-43011HIGHAdobe Prelude M4A file memory corruption vulnerability could lead to remote code executionEPSS 2.1%CVE-2021-40758HIGHAdobe After Effects WAV File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.0%CVE-2021-40760HIGHAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.0%CVE-2021-40759HIGHAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.0%CVE-2021-43013HIGHAdobe Media Encoder memory corruption vulnerability could lead to remote code executionEPSS 2.0%CVE-2021-42738HIGHAdobe Prelude MXF File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.0%CVE-2021-40783HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.0%CVE-2021-40784HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.0%CVE-2021-40779HIGHAdobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code executionEPSS 2.0%CVE-2021-40780HIGHAdobe Media Encoder MXF file memory corruption vulnerability could lead to arbitrary code executionEPSS 2.0%CVE-2021-42732HIGHAdobe InDesign crashes when parsing the GIF fileEPSS 2.0%CVE-2021-42725HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 2.0%CVE-2021-39830HIGHAdobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 2.0%CVE-2021-39832HIGHAdobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 2.0%CVE-2021-40735HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.8%