Falhas do tipo CWE-787

5.862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2023-27344HIGHPDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-27343HIGHPDF-XChange Editor EMF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-37036CRITICALCWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and paEPSS 0.5%CVE-2026-57197HIGHAsterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)EPSS 0.5%CVE-2025-68811CRITICALsvcrdma: use rc_pageoff for memcpy byte offsetEPSS 0.5%CVE-2026-5503MEDIUMout-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicNameEPSS 0.5%CVE-2024-7970HIGHOut of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crEPSS 0.5%CVE-2018-10883MEDIUMA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a deEPSS 0.5%CVE-2023-22242HIGHZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2022-31902MEDIUMNotepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().EPSS 0.5%CVE-2026-21869HIGHllama.cpp has Out-of-bounds Write in llama-serverEPSS 0.5%CVE-2025-29365CRITICALspimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.EPSS 0.5%CVE-2026-65374HIGHA memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TahEPSS 0.5%CVE-2024-28318HIGHgpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundary write vulnerability via swf_get_string at scene_manager/swEPSS 0.5%CVE-2026-15762CRITICALIBM DataPower Gateway Out-of-bounds WriteEPSS 0.5%CVE-2023-52727HIGHOpen Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits.EPSS 0.5%CVE-2026-45813HIGHApache NimBLE: Incorrect data validation in BASS add/modify source operationEPSS 0.5%CVE-2023-29551HIGHMemory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.5%CVE-2022-3570HIGHMultiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memEPSS 0.5%CVE-2026-46119CRITICALlibceph: Fix slab-out-of-bounds access in auth message processingEPSS 0.5%