Falhas do tipo CWE-787

5.862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2026-16692MEDIUMIBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer ProtocolEPSS 0.5%CVE-2026-62349HIGHTDengine: Off-by-One Buffer OverflowEPSS 0.5%CVE-2026-20464MEDIUMIn hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a EPSS 0.5%CVE-2026-44254MEDIUMWazuh: Stack Out-of-Bounds Write in remoted Decompression PathEPSS 0.5%CVE-2026-64835HIGHFFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio DecoderEPSS 0.5%CVE-2026-58049HIGHFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()EPSS 0.5%CVE-2026-112614MEDIUMAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and EPSS 0.5%CVE-2021-46763HIGHInsufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer poteEPSS 0.5%CVE-2026-53413HIGHZoom Clients - Buffer Over-writeEPSS 0.5%CVE-2022-1785HIGHOut-of-bounds Write in vim/vimEPSS 0.5%CVE-2023-20524HIGHAn attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potEPSS 0.5%CVE-2026-12292HIGHIncorrect boundary conditions in the Web Audio componentEPSS 0.5%CVE-2023-20954CRITICALIn SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code eEPSS 0.5%CVE-2023-20951CRITICALIn gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remoEPSS 0.5%CVE-2026-73194CRITICALDBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparseEPSS 0.5%CVE-2026-44436HIGHQuicly is vulnerable to connection state corruptionEPSS 0.5%CVE-2025-29029CRITICALTenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.EPSS 0.5%CVE-2025-29030CRITICALTenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.EPSS 0.5%CVE-2025-29031CRITICALTenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.EPSS 0.5%CVE-2025-25372HIGHNASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management ModuleEPSS 0.5%