Falhas do tipo CWE-787

5.859 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2020-8871HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-47107 . An attacker mEPSS 0.6%CVE-2026-29035HIGHCivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate DecompressionEPSS 0.6%CVE-2017-20229CRITICALMAWK 1.3.3-17 Stack-Based Buffer OverflowEPSS 0.6%CVE-2021-33656—When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.EPSS 0.6%CVE-2021-3330HIGHRCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in ZephyrEPSS 0.6%CVE-2024-6259HIGHBT: HCI: adv_ext_report Improper discarding in adv_ext_reportEPSS 0.6%CVE-2024-6443MEDIUMzephyr: out-of-bound read in utf8_truncEPSS 0.6%CVE-2023-5367HIGHXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyEPSS 0.6%CVE-2025-69419HIGHOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversionEPSS 0.6%CVE-2025-57709LOWQsync CentralEPSS 0.6%CVE-2026-78008HIGHFireware OS Authenticated Buffer Overflow in wgagentEPSS 0.6%CVE-2024-30373HIGHKofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.6%CVE-2021-20233—A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumEPSS 0.6%CVE-2026-68376HIGHsctp: fix auth_hmacs array size in struct sctp_cookieEPSS 0.6%CVE-2026-43802CRITICALAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS SequoEPSS 0.6%CVE-2024-23611HIGHOut of Bounds Write Due to Missing Bounds Check in LabVIEWEPSS 0.6%CVE-2026-58096HIGHppp(8): missing length validation in LcpDecodeConfig()EPSS 0.6%CVE-2025-66945CRITICALA path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /EPSS 0.6%CVE-2023-35871HIGHMemory Corruption vulnerability in SAP Web DispatcherEPSS 0.6%CVE-2022-41184—Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted EPSS 0.6%