CWE-787 跨界内存写 类弱点 3165 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-23124 | Autodesk AutoCAD 安全漏洞 — AutoCAD | 7.8 | High | 2024-02-22 |
| CVE-2024-23123 | Autodesk AutoCAD 安全漏洞 — AutoCAD | 7.8 | High | 2024-02-22 |
| CVE-2024-23122 | Autodesk AutoCAD 安全漏洞 — AutoCAD | 7.8 | High | 2024-02-22 |
| CVE-2024-23121 | Autodesk AutoCAD 安全漏洞 — AutoCAD | 7.8 | High | 2024-02-22 |
| CVE-2024-23120 | Autodesk AutoCAD 缓冲区错误漏洞 — AutoCAD | 7.8 | High | 2024-02-21 |
| CVE-2024-0446 | Autodesk AutoCAD 缓冲区错误漏洞 — AutoCAD | 7.8 | High | 2024-02-21 |
| CVE-2024-23305 | Biosig Project libbiosig 缓冲区错误漏洞 — libbiosig | 9.8 | Critical | 2024-02-20 |
| CVE-2023-5779 | zephyr 安全漏洞 — Zephyr | 4.4 | Medium | 2024-02-18 |
| CVE-2024-20726 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2024-02-15 |
| CVE-2024-20727 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2024-02-15 |
| CVE-2024-20728 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2024-02-15 |
| CVE-2024-20744 | Adobe Substance 3D Painter 缓冲区错误漏洞 — Substance3D - Painter | 7.8 | High | 2024-02-15 |
| CVE-2024-20743 | Adobe Substance 3D Painter 缓冲区错误漏洞 — Substance3D - Painter | 7.8 | High | 2024-02-15 |
| CVE-2024-20740 | Adobe Substance 3D Painter 缓冲区错误漏洞 — Substance3D - Painter | 7.8 | High | 2024-02-15 |
| CVE-2023-48229 | Contiki-NG 缓冲区错误漏洞 — contiki-ng | 7.0 | High | 2024-02-14 |
| CVE-2024-24924 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap | 7.8 | High | 2024-02-13 |
| CVE-2024-24922 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap | 7.8 | High | 2024-02-13 |
| CVE-2024-24920 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap | 7.8 | High | 2024-02-13 |
| CVE-2024-23803 | Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Tecnomatix Plant Simulation V2201 | 7.8 | High | 2024-02-13 |
| CVE-2024-23795 | Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Tecnomatix Plant Simulation V2201 | 7.8 | High | 2024-02-13 |
| CVE-2024-21762 | Fortinet FortiOS 缓冲区错误漏洞 — FortiOS | 9.6 | Critical | 2024-02-09 |
| CVE-2024-0229 | X.org Server 安全漏洞 | 7.8 | High | 2024-02-09 |
| CVE-2024-0244 | Canon 多款产品缓冲区错误漏洞 — Satera MF750C Series | 9.8 | Critical | 2024-02-06 |
| CVE-2023-6234 | Canon 多款产品缓冲区错误漏洞 — Satera LBP670C Series | 9.8 | Critical | 2024-02-06 |
| CVE-2023-6233 | Canon 多款产品缓冲区错误漏洞 — Satera LBP670C Series | 9.8 | Critical | 2024-02-06 |
| CVE-2023-6232 | Canon 多款产品缓冲区错误漏洞 — Satera LBP670C Series | 9.8 | Critical | 2024-02-06 |
| CVE-2023-6231 | Canon 多款产品缓冲区错误漏洞 — Satera LBP670C Series | 9.8 | Critical | 2024-02-06 |
| CVE-2023-6230 | Canon 多款产品缓冲区错误漏洞 — Satera LBP670C Series | 9.8 | Critical | 2024-02-06 |
| CVE-2023-6229 | Canon多款产品缓冲区错误漏洞 — Satera LBP670C Series | 9.8 | Critical | 2024-02-06 |
| CVE-2023-5643 | Arm Valhall GPU Kernel Driver和Bifrost GPU Kernel Driver 缓冲区错误漏洞 — Bifrost GPU Kernel Driver | 7.8 | - | 2024-02-05 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3165 条 CVE 漏洞。