Falhas do tipo CWE-787

5.841 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2020-14305—An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connectEPSS 5.2%CVE-2020-15629HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 5.1%CVE-2020-1910—A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed EPSS 5.1%CVE-2022-22629HIGHA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iEPSS 5.0%CVE-2020-36518HIGHjackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.EPSS 4.9%CVE-2020-3119HIGHCisco NX-OS Software Cisco Discovery Protocol Remote Code Execution VulnerabilityEPSS 4.8%CVE-2012-2806HIGHHeap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of serviceEPSS 4.8%CVE-2020-1027HIGHAn elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oEPSS 4.7%KEVCVE-2020-13556CRITICALAn out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c7EPSS 4.7%CVE-2021-21086HIGHAdobe Reader CoolType Arbitrary Stack ManipulationEPSS 4.7%CVE-2021-3634—A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the seEPSS 4.7%CVE-2021-31452HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 4.6%CVE-2021-21071HIGHAdobe Animate memory corruption vulnerabilityEPSS 4.6%CVE-2019-8246CRITICALAdobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary codEPSS 4.6%CVE-2019-7287HIGHA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to exeEPSS 4.6%KEVCVE-2022-24092HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 4.5%CVE-2020-10823CRITICALA stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1EPSS 4.4%CVE-2023-33629HIGHH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.EPSS 4.4%CVE-2023-48316CRITICALAzure RTOS NetX Duo Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-17403HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%