Falhas do tipo CWE-787

5.843 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2024-23225HIGHA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 1EPSS 1.5%KEVCVE-2023-33975CRITICALRIOT-OS vulnerable to Out of Bounds Write in _rbuf_addEPSS 1.5%CVE-2023-0782HIGHTenda AC23 httpd formGetSysToolDDNS out-of-bounds writeEPSS 1.5%CVE-2022-44194CRITICALNetgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec.EPSS 1.5%CVE-2022-26700HIGHA memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 1EPSS 1.5%CVE-2022-34671HIGHNVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-boundsEPSS 1.5%CVE-2025-6021HIGHLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2EPSS 1.5%CVE-2022-40862CRITICALTenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/EPSS 1.5%CVE-2022-40869CRITICALTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameterEPSS 1.5%CVE-2022-40865CRITICALTenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchEPSS 1.5%CVE-2023-2934HIGHOut of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruptionEPSS 1.5%CVE-2023-32324HIGHOpenPrinting CUPS vulnerable to heap buffer overflowEPSS 1.5%CVE-2023-6232CRITICALBuffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser EPSS 1.5%CVE-2023-6230CRITICALBuffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser EPSS 1.5%CVE-2018-3870HIGHAn exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image proceEPSS 1.5%CVE-2022-43001CRITICALD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.EPSS 1.4%CVE-2022-43003CRITICALD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function.EPSS 1.4%CVE-2022-43002CRITICALD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54.EPSS 1.4%CVE-2022-43000CRITICALD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4.EPSS 1.4%CVE-2024-29509HIGHArtifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.EPSS 1.4%