Falhas do tipo CWE-787

5.858 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2022-41191HIGHDue to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusEPSS 0.6%CVE-2022-41195—Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received fromEPSS 0.6%CVE-2026-13592MEDIUMliftoff-sr CIPster EtherNet IP Message append out-of-bounds writeEPSS 0.6%CVE-2024-48856CRITICALVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%CVE-2022-2081HIGHA vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and coEPSS 0.6%CVE-2022-38980CRITICALThe HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of thiEPSS 0.6%CVE-2023-32111HIGHMemory Corruption vulnerability in SAP PowerDesigner (Proxy)EPSS 0.6%CVE-2025-20681CRITICALIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegEPSS 0.6%CVE-2026-97631CRITICALPre-boot RCE in EDK II PXE driverEPSS 0.6%CVE-2025-20684CRITICALIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegEPSS 0.6%CVE-2026-93011MEDIUMDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsEPSS 0.6%CVE-2026-10883HIGHType Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a craftEPSS 0.6%CVE-2026-10881CRITICALOut of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escEPSS 0.6%CVE-2023-46761—Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.EPSS 0.6%CVE-2023-46760HIGHOut-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.EPSS 0.6%CVE-2022-2320—A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results frEPSS 0.6%CVE-2026-17255MEDIUMIBM i is Affected By Denial of Service Vulnerability []EPSS 0.6%CVE-2026-16958MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.6%CVE-2026-17168HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.6%CVE-2026-116569HIGHFreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsingEPSS 0.6%