Fallos del tipo CWE-788

147 resultados

Acesso de memória além do limite do buffer

A aplicação tenta acessar dados em um endereço de memória que está fora dos limites de um buffer alocado. Isso ocorre quando o código não valida corretamente o tamanho ou índice antes de ler/escrever, permitindo leitura de dados sensíveis ou corrupção de memória adjacente.

Ejemplo

Um servidor processa um pacote de rede e copia dados para um array de 256 bytes sem verificar o tamanho real do pacote. Se o pacote tiver 500 bytes, a cópia escreve 244 bytes além do buffer, sobrescrevendo variáveis locais ou dados de controle da pilha.

Cómo mitigar

Sempre validar e limitar o tamanho de leitura/escrita aos limites conhecidos do buffer antes de acessá-lo. Use funções seguras (como `strncpy` em C, ou linguagens com gerenciamento automático de memória), ou implemente verificações explícitas de limites e índices.

CVE-2021-40735HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-40771HIGHAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.8%CVE-2021-40772HIGHAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.8%CVE-2021-40775HIGHAdobe Prelude SVG File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.8%CVE-2021-42729HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-42730HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-42724HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-39824HIGHAdobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.8%CVE-2021-40739HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-40738HIGHAdobe Audition WAV file Memory corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-40740HIGHAdobe Audition Memory Corruption could lead to Arbitrary code executionEPSS 1.8%CVE-2021-42737HIGHAdobe Prelude WAV File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40770HIGHAdobe Prelude M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 1.7%CVE-2021-39819HIGHAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-39818HIGHAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-42527HIGHAdobe Premiere Elements PSD file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%CVE-2021-40703HIGHAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40702HIGHAdobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40701HIGHAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 1.7%CVE-2021-40792HIGHAdobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code executionEPSS 1.7%