Falhas do tipo CWE-787

5.862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2025-1744CRITICALOut-of-bounds Write in radare2EPSS 0.5%CVE-2026-3086HIGHGStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-20501HIGHMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could alEPSS 0.5%CVE-2024-20499HIGHMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could alEPSS 0.5%CVE-2023-45676HIGHMulti-byte write heap buffer overflow in start_decoder in stb_vorbisEPSS 0.5%CVE-2026-6679HIGHDTLS 1.3 ACK serialization heap buffer overflow via integer truncationEPSS 0.5%CVE-2026-32636MEDIUMImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crashEPSS 0.5%CVE-2024-36114HIGHDecompressors can crash the JVM and leak memory content in AircompressorEPSS 0.5%CVE-2024-53699LOWQTS, QuTS heroEPSS 0.5%CVE-2026-121952CRITICALFreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 CapabilityEPSS 0.5%CVE-2024-38638LOWQTS, QuTS heroEPSS 0.5%CVE-2024-53697LOWQTS, QuTS heroEPSS 0.5%CVE-2026-19642MEDIUMOut-of-bounds write in the Base64 decoder in Amazon aws-sdk-cppEPSS 0.5%CVE-2024-22254HIGHOut-of-bounds write vulnerabilityEPSS 0.5%CVE-2026-71263CRITICALFreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()EPSS 0.5%CVE-2026-34588HIGHOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteEPSS 0.5%CVE-2026-3548HIGHBuffer overflow in CRL number parsing in wolfSSLEPSS 0.5%CVE-2023-38118HIGHFoxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-20357MEDIUMA vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an EPSS 0.5%CVE-2026-6786HIGHMemory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150EPSS 0.5%