Falhas do tipo CWE-787

5.851 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2023-50585CRITICALTenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.EPSS 0.7%CVE-2023-51953CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.EPSS 0.7%CVE-2023-51952CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.EPSS 0.7%CVE-2023-51958CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.EPSS 0.7%CVE-2023-51964CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.EPSS 0.7%CVE-2023-51959CRITICALTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.EPSS 0.7%CVE-2026-57201HIGHAsterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte BufferEPSS 0.7%CVE-2022-40520HIGHStack based buffer overflow in CoreEPSS 0.7%CVE-2026-55687HIGHESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker ParsingEPSS 0.7%CVE-2024-45508CRITICALHTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a wEPSS 0.7%CVE-2024-57579CRITICALTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function.EPSS 0.7%CVE-2026-43629CRITICALllama.cpp b4882–b9058 Buffer Overflow in KV Cache State RestoreEPSS 0.7%CVE-2023-51084CRITICALhyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.EPSS 0.7%CVE-2023-26553MEDIUMmstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack EPSS 0.7%CVE-2024-39881HIGHOut-of-bounds Write in Delta Electronics CNCSoft-G2EPSS 0.7%CVE-2021-21971LOWAn out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-cEPSS 0.7%CVE-2024-25447HIGHAn issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a EPSS 0.7%CVE-2026-112398CRITICALPillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionEPSS 0.7%CVE-2026-85452HIGHMOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS IdentifiersEPSS 0.7%CVE-2022-41193—Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file received from untrusEPSS 0.7%