CWE-787 跨界内存写 类弱点 3165 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-48629 | Adobe Substance 3D Sampler 缓冲区错误漏洞 — Substance3D - Sampler | 7.8 | High | 2023-12-13 |
| CVE-2023-48626 | Adobe Substance 3D Sampler 缓冲区错误漏洞 — Substance3D - Sampler | 7.8 | High | 2023-12-13 |
| CVE-2023-47063 | Adobe Illustrator 缓冲区错误漏洞 — Illustrator | 7.8 | High | 2023-12-13 |
| CVE-2023-48695 | Azure RTOS USBX 缓冲区错误漏洞 — usbx | 7.2 | High | 2023-12-05 |
| CVE-2023-48692 | Azure RTOS NetX Duo 安全漏洞 — netxduo | 9.1 | Critical | 2023-12-05 |
| CVE-2023-48691 | Azure RTOS NetX Duo 缓冲区错误漏洞 — netxduo | 8.1 | High | 2023-12-05 |
| CVE-2023-48316 | Azure RTOS NetX Duo 安全漏洞 — netxduo | 9.8 | Critical | 2023-12-05 |
| CVE-2023-48315 | Azure RTOS NetX Duo 安全漏洞 — netxduo | 8.8 | High | 2023-12-05 |
| CVE-2023-32804 | ARM Mali GPU Kernel Driver 安全漏洞 — Midgard GPU Userspace Driver | 7.8AI | High AI | 2023-12-04 |
| CVE-2023-29075 | Autodesk AutoCAD 安全漏洞 — AutoCAD, Advance Steel and Civil 3D | 7.8 | - | 2023-11-23 |
| CVE-2023-29074 | Autodesk AutoCAD 安全漏洞 — AutoCAD, Advance Steel and Civil 3D | 7.8 | - | 2023-11-23 |
| CVE-2023-40152 | Fuji Electric Tellus Lite V-Simulator 安全漏洞 — Tellus Lite V-Simulator | 7.8 | High | 2023-11-22 |
| CVE-2023-5593 | Zyxel SecuExtender SSL VPN Client 安全漏洞 — SecuExtender SSL VPN Client | 7.8 | High | 2023-11-20 |
| CVE-2023-47070 | Adobe After Effects 安全漏洞 — After Effects | 7.8 | High | 2023-11-17 |
| CVE-2023-47073 | Adobe After Effects 安全漏洞 — After Effects | 7.8 | High | 2023-11-17 |
| CVE-2023-47057 | Adobe Premiere Pro 安全漏洞 — Premiere Pro | 7.8 | High | 2023-11-16 |
| CVE-2023-47046 | Adobe Audition 安全漏洞 — Audition | 5.5 | Medium | 2023-11-16 |
| CVE-2023-47041 | Adobe Media Encoder 安全漏洞 — Media Encoder | 7.8 | High | 2023-11-16 |
| CVE-2023-44330 | Adobe Photoshop 安全漏洞 — Photoshop Desktop | 7.8 | High | 2023-11-16 |
| CVE-2023-44366 | Adobe Acrobat Reader 安全漏洞 — Acrobat Reader | 7.8 | High | 2023-11-16 |
| CVE-2023-46761 | Huawei HarmonyOS 缓冲区错误漏洞 — HarmonyOS | 8.8 | - | 2023-11-08 |
| CVE-2023-46760 | Huawei HarmonyOS 缓冲区错误漏洞 — HarmonyOS | 8.8 | - | 2023-11-08 |
| CVE-2023-5941 | FreeBSD 安全漏洞 — FreeBSD | 9.8 | - | 2023-11-08 |
| CVE-2023-4154 | Samba 安全漏洞 — samba | 7.5 | High | 2023-11-07 |
| CVE-2023-44398 | Exiv2 缓冲区错误漏洞 — exiv2 | 8.8 | High | 2023-11-06 |
| CVE-2023-20213 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software | 4.3 | Medium | 2023-11-01 |
| CVE-2023-39427 | Ashlar Incorporated Ashlar-Vellum 缓冲区错误漏洞 — Cobalt | 7.8 | High | 2023-10-26 |
| CVE-2023-5367 | xorg-x11-server 缓冲区错误漏洞 — Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | 7.8 | High | 2023-10-25 |
| CVE-2023-5717 | Linux kernel 缓冲区错误漏洞 — Kernel | 7.8 | High | 2023-10-25 |
| CVE-2022-3699 | Lenovo Diagnostics 缓冲区错误漏洞 — HardwareScanPlugin | 7.8 | High | 2023-10-24 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3165 条 CVE 漏洞。