Falhas do tipo CWE-787

5.842 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2020-9568HIGHAdobe Bridge versions 10.0.1 and earlier version have a memory corruption vulnerability. Successful exploitation could lead to arbitrary codEPSS 2.7%CVE-2022-46341HIGHA vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memEPSS 2.7%CVE-2021-45956CRITICALDnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-EPSS 2.7%CVE-2021-32948—An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the EPSS 2.7%CVE-2021-32952—An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lackEPSS 2.7%CVE-2017-7467HIGHA buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could pEPSS 2.7%CVE-2020-0878MEDIUMMicrosoft Browser Memory Corruption VulnerabilityEPSS 2.7%KEVCVE-2022-46340HIGHA vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extensionEPSS 2.7%CVE-2020-6089HIGHAn exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20. A specially crafted ANI file can cause a bEPSS 2.7%CVE-2018-18986—LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds rEPSS 2.7%CVE-2022-42808CRITICALAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS VeEPSS 2.7%CVE-2021-42271HIGHAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.7%CVE-2021-42272HIGHAdobe Animate GIF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.7%CVE-2021-42524HIGHAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.7%CVE-2021-42270HIGHAdobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.7%CVE-2020-36328—A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalEPSS 2.7%CVE-2020-27287—Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allEPSS 2.6%CVE-2025-41236CRITICALVMXNET3 integer-overflow vulnerabilityEPSS 2.6%CVE-2026-7840CRITICALUltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)EPSS 2.6%CVE-2022-41073HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 2.6%KEV