Falhas do tipo CWE-787

5.133 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2012-2806HIGHHeap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of serviceEPSS 4.8%CVE-2026-2045HIGHGIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.7%CVE-2021-21086HIGHAdobe Reader CoolType Arbitrary Stack ManipulationEPSS 4.7%CVE-2020-13556CRITICALAn out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c7EPSS 4.7%CVE-2025-11187MEDIUMImproper validation of PBMAC1 parameters in PKCS#12 MAC verificationEPSS 4.7%CVE-2021-3634—A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the seEPSS 4.7%CVE-2019-8246CRITICALAdobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary codEPSS 4.6%CVE-2019-7287HIGHA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to exeEPSS 4.6%KEVCVE-2020-1027HIGHAn elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oEPSS 4.5%KEVCVE-2022-39173HIGHIn wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly rEPSS 4.5%CVE-2022-24092HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.5%CVE-2020-10823CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1EPSS 4.4%CVE-2026-45700HIGHHeap-buffer-overflow write in planar bitmap decoderEPSS 4.4%CVE-2023-33629HIGHH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.EPSS 4.4%CVE-2023-48316CRITICALAzure RTOS NetX Duo Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-17403HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%CVE-2020-17404HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%CVE-2022-3699HIGH A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior toEPSS 4.2%CVE-2020-24411HIGHAdobe Illustrator PDF File Parsing Out-Of-Bounds Write VulnerabilityEPSS 4.2%CVE-2019-1213CRITICALWindows DHCP Server Remote Code Execution VulnerabilityEPSS 4.2%