Falhas do tipo CWE-787

5.848 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2023-51968CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.EPSS 0.7%CVE-2023-51970CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.EPSS 0.7%CVE-2026-112486HIGHAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and EPSS 0.7%CVE-2024-20067CRITICALIn modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no adEPSS 0.7%CVE-2026-13384HIGHWatchGuard Firebox wgagent Out of Bounds Write VulnerabilityEPSS 0.7%CVE-2024-5508HIGHLuxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-5506HIGHLuxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-13383HIGHWatchGuard Firebox ikestubd Out of Bounds Write VulnerabilityEPSS 0.7%CVE-2018-10882MEDIUMA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denEPSS 0.7%CVE-2026-50161CRITICALlibre: Integer overflow in websock_decode() masked frame length check leads to heap buffer overflowEPSS 0.7%CVE-2024-43091CRITICALIn filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code EPSS 0.7%CVE-2022-32947HIGHThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app EPSS 0.7%CVE-2022-34485CRITICALMozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101. Some of thesEPSS 0.7%CVE-2022-3398HIGHOMRON CX-Programmer Out-of-bounds WriteEPSS 0.7%CVE-2022-3397HIGHOMRON CX-Programmer Out-of-bounds WriteEPSS 0.7%CVE-2022-3396HIGHOMRON CX-Programmer Out-of-bounds WriteEPSS 0.7%CVE-2026-61674CRITICALFluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handlerEPSS 0.7%CVE-2023-28176HIGHMemory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume thatEPSS 0.7%CVE-2019-25600HIGHUltraVNC Viewer 1.2.2.4 Denial of Service via Buffer OverflowEPSS 0.7%CVE-2026-84383CRITICALlibheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` itemsEPSS 0.7%