Falhas do tipo CWE-787
5.145 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2023-29907MEDIUMH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.EPSS 0.8%CVE-2023-29917MEDIUMH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm.EPSS 0.8%CVE-2023-27806MEDIUMH3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. This vuEPSS 0.8%CVE-2023-29911MEDIUMH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm.EPSS 0.8%CVE-2023-29912MEDIUMH3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.EPSS 0.8%CVE-2023-29909MEDIUMH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.EPSS 0.8%CVE-2023-27804MEDIUMH3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerabilitEPSS 0.8%CVE-2024-23709MEDIUMIn multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosuEPSS 0.8%CVE-2024-24946HIGHA heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1EPSS 0.8%CVE-2026-5318MEDIUMLibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds writeEPSS 0.8%CVE-2026-64772CRITICALAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 aEPSS 0.8%CVE-2022-32837HIGHThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may bEPSS 0.8%CVE-2022-35044MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x617087.EPSS 0.8%CVE-2022-35042MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11.EPSS 0.8%CVE-2022-35041MEDIUMOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f.EPSS 0.8%CVE-2022-31363HIGHCypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is:EPSS 0.8%CVE-2022-31364HIGHCypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is:EPSS 0.8%CVE-2023-22415HIGHJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are receivedEPSS 0.8%CVE-2023-34417CRITICALMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.8%CVE-2023-29578HIGHmp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mEPSS 0.8%