Falhas do tipo CWE-787

5.862 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2026-124739HIGHBusybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.confEPSS 0.5%CVE-2023-38072HIGHA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), TeamcenEPSS 0.5%CVE-2026-101976HIGHJunos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crashEPSS 0.5%CVE-2026-3849MEDIUMBuffer Overflow in HPKE via Oversized ECH ConfigEPSS 0.5%CVE-2020-36964HIGHYATinyWinFTP - Denial of ServiceEPSS 0.5%CVE-2026-77555HIGHA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exEPSS 0.5%CVE-2022-48176HIGHNetgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to EPSS 0.5%CVE-2026-95862HIGHA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exEPSS 0.5%CVE-2026-15057HIGHIBM WebSphere Application Server Liberty is affected by a denial of service vulnerabilityEPSS 0.5%CVE-2026-79043CRITICALOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsideEPSS 0.5%CVE-2026-88407HIGHAn out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers EPSS 0.5%CVE-2026-116573MEDIUMFreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header userEPSS 0.5%CVE-2024-0446HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.5%CVE-2025-68381MEDIUMPacketbeat Improper Bounds CheckEPSS 0.5%CVE-2025-12026HIGHWatchGuard Firebox Authenticated Out of Bounds Write in certdEPSS 0.5%CVE-2021-1368HIGHCisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrary Code Execution VulnerabilityEPSS 0.5%CVE-2022-38977HIGHThe HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resultiEPSS 0.5%CVE-2026-95357CRITICALOut of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary EPSS 0.5%CVE-2022-42416HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.5%CVE-2024-20746HIGHAdobe Premiere Pro Out-of-bounds Write Arbitrary code executionEPSS 0.5%