Falhas do tipo CWE-787

5.862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2024-45539HIGHOut-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology EPSS 0.5%CVE-2026-64739HIGHAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 anEPSS 0.5%CVE-2026-6071HIGHCode Execution Vulnerability in Arena®EPSS 0.5%CVE-2026-6785HIGHMemory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150EPSS 0.5%CVE-2026-64355CRITICALbpf: Reject fragmented frames in devmapEPSS 0.5%CVE-2023-45681HIGHOut of bounds heap buffer write in stb_vorbisEPSS 0.5%CVE-2022-41902HIGHOut of bounds write in grappler in TensorflowEPSS 0.5%CVE-2024-9121HIGHInappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds meEPSS 0.5%CVE-2026-111280HIGHsnap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadAreaEPSS 0.5%CVE-2024-5875HIGHIrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-93866CRITICALFireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteEPSS 0.5%CVE-2024-5877HIGHIrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-5874HIGHIrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2022-32827MEDIUMA memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able EPSS 0.5%CVE-2026-27853MEDIUMOut-of-bounds write when rewriting large DNS packetsEPSS 0.5%CVE-2026-10849HIGHHeap out-of-bounds write in Zephyr hawkBit OTA client when terminating server response bodyEPSS 0.5%CVE-2023-42753HIGHKernel: netfilter: potential slab-out-of-bound access due to integer underflowEPSS 0.5%CVE-2025-1744CRITICALOut-of-bounds Write in radare2EPSS 0.5%CVE-2024-56426HIGHAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2EPSS 0.5%CVE-2026-2922HIGHGStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%