Falhas do tipo CWE-787

5.854 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2023-46866MEDIUMIn International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access arEPSS 0.7%CVE-2024-1913HIGH An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execEPSS 0.7%CVE-2023-5406MEDIUMServer communication with a controller can lead to remote code execution using a specially crafted message from the controller. See HoneywelEPSS 0.7%CVE-2026-48773CRITICALProxySQL pre-auth heap overflow in MySQL and PostgreSQL first-packet handlingEPSS 0.7%CVE-2026-26965HIGHFreeRDP has Out-of-bounds WriteEPSS 0.7%CVE-2024-44375HIGHD-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function.EPSS 0.7%CVE-2026-28857MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visioEPSS 0.7%CVE-2021-39793HIGHIn kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could leaEPSS 0.7%KEVCVE-2026-32740HIGHlibheif: Heap-Buffer-Overflow Write in Grid Tile Chroma CompositingEPSS 0.7%CVE-2023-20819MEDIUMIn CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privileEPSS 0.7%CVE-2022-46879HIGHMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safetyEPSS 0.7%CVE-2022-48322CRITICALNETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.EPSS 0.7%CVE-2024-35273HIGHA out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escEPSS 0.7%CVE-2024-9419HIGHCertain HP Print Products–Potential Remote Code Execution and/or Elevation of Privilege with the HP Smart Universal Printing DriverEPSS 0.7%CVE-2022-42498CRITICALIn Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution EPSS 0.7%CVE-2026-93452HIGHsnappy-java through 1.1.10.8 Buffer Overflow in Snappy.compressEPSS 0.7%CVE-2024-52531MEDIUMGNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict.EPSS 0.7%CVE-2023-34295HIGHSante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-34296HIGHSante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-34297HIGHSante DICOM Viewer Pro JP2 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%