Falhas do tipo CWE-787

5.846 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2023-27805MEDIUMH3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerabiliEPSS 0.8%CVE-2023-29909MEDIUMH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.EPSS 0.8%CVE-2023-27807MEDIUMH3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerabilitEPSS 0.8%CVE-2023-29916MEDIUMH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.EPSS 0.8%CVE-2023-29905MEDIUMH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.EPSS 0.8%CVE-2023-24613MEDIUMThe user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite theEPSS 0.8%CVE-2023-27802MEDIUMH3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerabiliEPSS 0.8%CVE-2023-27801MEDIUMH3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerabiEPSS 0.8%CVE-2024-23709MEDIUMIn multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosuEPSS 0.8%CVE-2024-24946HIGHA heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1EPSS 0.8%CVE-2022-32837HIGHThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may bEPSS 0.8%CVE-2026-64772CRITICALAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 aEPSS 0.8%CVE-2026-82391CRITICALOut-of-bounds write in Zephyr HTTP/2 server static-filesystem handler via corrupted receive-buffer lengthEPSS 0.8%CVE-2022-36054MEDIUMOut-of-bounds write when decompressing 6LoWPAN payload in Contiki-NGEPSS 0.8%CVE-2023-34417CRITICALMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.8%CVE-2025-2474CRITICALVulnerability in PCX Image Codec Impacts QNX Software Development PlatformEPSS 0.8%CVE-2022-41989CRITICALCVE-2022-41989EPSS 0.8%CVE-2023-29578HIGHmp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mEPSS 0.8%CVE-2026-59250HIGHMegaco flex scanner buffer overflow via oversized property parm nameEPSS 0.8%CVE-2023-34620HIGHAn issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that EPSS 0.8%