Falhas do tipo CWE-787

5.860 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2024-1557HIGHMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.6%CVE-2026-93857CRITICALFireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionEPSS 0.6%CVE-2024-27228CRITICALthere is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional executionEPSS 0.6%CVE-2023-3633HIGHOut of Bounds Memory Corruption Issue in CEVA EngineEPSS 0.6%CVE-2022-0511HIGHMozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla FuzzEPSS 0.6%CVE-2022-22752HIGHMozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence EPSS 0.6%CVE-2022-46690HIGHAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13EPSS 0.6%CVE-2022-28288HIGHMozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present iEPSS 0.6%CVE-2024-23124HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2026-71254CRITICALnanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()EPSS 0.6%CVE-2026-59147CRITICALData::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_findEPSS 0.6%CVE-2026-116570HIGHFreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationEPSS 0.6%CVE-2024-42986HIGHTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulEPSS 0.6%CVE-2026-27648HIGHweb_webview has an out-of-bounds write vulnerabilityEPSS 0.6%CVE-2024-42977HIGHTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerabilitEPSS 0.6%CVE-2026-112633MEDIUMAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and EPSS 0.6%CVE-2024-50854HIGHTenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.EPSS 0.6%CVE-2026-112646MEDIUMAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and EPSS 0.6%CVE-2024-6137HIGHBT: Classic: SDP OOB access in get_att_search_listEPSS 0.5%CVE-2021-3489HIGHLinux kernel eBPF RINGBUF map oversized allocationEPSS 0.5%