Falhas do tipo CWE-788

147 resultados

Acesso de memória além do limite do buffer

Ocorre quando o código tenta ler ou escrever em um endereço de memória que está fora dos limites válidos de um buffer alocado. O programa não valida corretamente o índice ou offset antes de acessar a memória, permitindo leitura de dados sensíveis ou corrupção de estruturas adjacentes. Em ataques, isso pode vazar informações ou causar crash.

Exemplo

Um parser de arquivo aloca 256 bytes para armazenar um campo e, sem validar o tamanho lido do arquivo, copia 500 bytes para esse buffer. O acesso continua além da memória alocada, sobrescrevendo dados do processo ou vazando informações de outra variável próxima na stack.

Como mitigar

Sempre validar tamanhos e índices antes de acessar buffers — use funções seguras (strncpy em vez de strcpy, bounds checking explícito). Em linguagens com gerenciamento automático de memória, o risco reduz, mas em C/C++ exige disciplina: verificar limites, usar ferramentas estáticas (Clang Static Analyzer, Coverity) e testes com fuzzing.

CVE-2023-0103HIGHCVE-2023-0103EPSS 0.7%CVE-2024-20330HIGHCisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 and Snort 2 Denial of Service VulnerabilityEPSS 0.7%CVE-2024-27829HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may lead to unexpected apEPSS 0.6%CVE-2024-20402HIGHA vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) SoftwarEPSS 0.5%CVE-2022-24893HIGHEspressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruptionEPSS 0.5%CVE-2021-32629HIGHMemory access due to code generation flaw in Cranelift moduleEPSS 0.5%CVE-2021-3588LOWmemory contents disclosure in cli_feat_read_cbEPSS 0.4%CVE-2024-5700HIGHMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruptiEPSS 0.4%CVE-2026-20052MEDIUMCisco Secure Firewall Threat Defense Software Snort 3 Memory Management Denial of Service VulnerabilityEPSS 0.4%CVE-2023-20169HIGHA vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series SEPSS 0.3%CVE-2024-21618HIGHJunos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashesEPSS 0.3%CVE-2024-27828HIGHThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.EPSS 0.3%CVE-2023-38570MEDIUMAccess of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalatioEPSS 0.2%CVE-2026-25584HIGHiccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()EPSS 0.2%CVE-2025-43580MEDIUMAudition | Access of Memory Location After End of Buffer (CWE-788)EPSS 0.2%CVE-2024-0154LOWDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged aEPSS 0.2%CVE-2023-22297HIGHAccess of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to EPSS 0.2%CVE-2024-0074HIGHCVEEPSS 0.2%CVE-2023-25506HIGHNVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause aEPSS 0.2%CVE-2023-0200HIGHNVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffEPSS 0.2%