Falhas do tipo CWE-787

5.854 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2026-36355HIGHThe rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access controEPSS 0.7%CVE-2023-32132HIGHSante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2022-40961MEDIUMDuring startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.<br>EPSS 0.7%CVE-2023-32131HIGHSante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-20066HIGHIn modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no addiEPSS 0.7%CVE-2023-43785MEDIUMLibx11: out-of-bounds memory access in _xkbreadkeysyms()EPSS 0.7%CVE-2024-41131HIGHOut-of-bounds Write in SixLabors ImageSharpEPSS 0.7%CVE-2023-32133HIGHSante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-0930HIGHHeap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via EPSS 0.7%CVE-2023-25745HIGHMemory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.7%CVE-2023-25746HIGHMemory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effEPSS 0.7%CVE-2022-32810HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. AnEPSS 0.7%CVE-2024-35797HIGHmm: cachestat: fix two shmem bugsEPSS 0.7%CVE-2025-64657CRITICALAzure Application Gateway Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-0310HIGHPAN-OS: Buffer Overflow Vulnerability via XML ProcessingEPSS 0.7%CVE-2026-54210CRITICALTeamDavid: Buffer Overflow in file names of file upload functionalitiesEPSS 0.7%CVE-2026-54212CRITICALTeamDavid: Buffer Overflow in JSON-parsingEPSS 0.7%CVE-2022-41201HIGHDue to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusteEPSS 0.7%CVE-2023-26551MEDIUMmstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a clieEPSS 0.7%CVE-2026-13086CRITICALFireware OS Stack-Based Buffer Overflow in Mobile Security epm EndpointEPSS 0.7%