Falhas do tipo CWE-787

5.849 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2021-47772HIGH10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)EPSS 0.7%CVE-2022-32821HIGHA memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, mEPSS 0.7%CVE-2022-43038MEDIUMBento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadCache() function in mp42ts.EPSS 0.7%CVE-2021-31916—An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kEPSS 0.7%CVE-2023-31556HIGHpodofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent.EPSS 0.7%CVE-2023-31976HIGHlibming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c.EPSS 0.7%CVE-2019-25654HIGHCore FTP/SFTP Server 1.2 Denial of Service via Buffer OverflowEPSS 0.7%CVE-2026-22858MEDIUMFreeRDP has a global-buffer-overflow in crypto_base64_decodeEPSS 0.7%CVE-2022-42499CRITICALIn sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to reEPSS 0.7%CVE-2023-23605HIGHMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.7EPSS 0.7%CVE-2026-73639CRITICALImager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8EPSS 0.7%CVE-2023-51966CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.EPSS 0.7%CVE-2023-51971CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.EPSS 0.7%CVE-2023-51965CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.EPSS 0.7%CVE-2023-51101CRITICALTenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.EPSS 0.7%CVE-2023-51957CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.EPSS 0.7%CVE-2023-51953CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.EPSS 0.7%CVE-2023-51964CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.EPSS 0.7%CVE-2023-51956CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptvEPSS 0.7%CVE-2023-51954CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.EPSS 0.7%