Falhas do tipo CWE-787

5.212 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2026-0961MEDIUMOut-of-bounds Write in WiresharkEPSS 0.2%CVE-2025-7998HIGHAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7224HIGHINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7227HIGHINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7228HIGHINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-5747HIGHOut-of-bounds Write in Firecracker virtio-pci TransportEPSS 0.2%CVE-2025-7225HIGHINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7986HIGHAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2023-38528HIGHA vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35EPSS 0.2%CVE-2025-7229HIGHINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2024-57955MEDIUMArbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentialitEPSS 0.2%CVE-2025-7226HIGHINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2018-25261HIGHIperius Backup 5.8.1 Local Buffer Overflow SEHEPSS 0.2%CVE-2024-38386HIGHArkcompiler Ets Runtime has an out-of-bounds write vulnerabilityEPSS 0.2%CVE-2018-25265HIGHLanSpy 2.0.1.159 Local Buffer OverflowEPSS 0.2%CVE-2025-7223HIGHINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-59181MEDIUMOpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElementsEPSS 0.2%CVE-2024-50288HIGHmedia: vivid: fix buffer overwrite when using > 32 buffersEPSS 0.2%CVE-2023-22615HIGHAn issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacEPSS 0.2%CVE-2026-7950MEDIUMOut of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via maEPSS 0.2%