Falhas do tipo CWE-787

5.176 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2024-23157HIGHMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based productsEPSS 0.4%CVE-2022-45494HIGHBuffer overflow vulnerability in function json_parse_object in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (NovembEPSS 0.4%CVE-2025-26785HIGHAn issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330EPSS 0.4%CVE-2023-32889HIGHIn Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service witEPSS 0.4%CVE-2024-55569HIGHAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380,EPSS 0.4%CVE-2024-9468HIGHPAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketEPSS 0.4%CVE-2026-3088MEDIUMUnauthenticated users can disrupt router operationEPSS 0.4%CVE-2022-38977HIGHThe HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resultiEPSS 0.4%CVE-2022-41305HIGHA maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by wrEPSS 0.4%CVE-2020-10021HIGHOut-of-bounds write in USB Mass Storage with unaligned sizesEPSS 0.4%CVE-2024-5304HIGHKofax Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-8915HIGHOut-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713cEPSS 0.4%CVE-2026-33854HIGHOut-of-bounds Write in MolotovCherry Android-ImageMagick7EPSS 0.4%CVE-2022-43289HIGHDeark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c.EPSS 0.4%CVE-2025-24326HIGHBIG-IP Advanced WAF/ASM BADoS vulnerabilityEPSS 0.4%CVE-2025-47202CRITICALIn RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580EPSS 0.4%CVE-2023-38087HIGHKofax Power PDF clearTimeOut Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34292HIGHAshlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-41186—Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from uEPSS 0.4%CVE-2023-38089HIGHKofax Power PDF clearInterval Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%