CWE-787 跨界内存写 类弱点 3164 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-26415 | Adobe Substance 3D Designer 缓冲区错误漏洞 — Substance3D - Designer | 7.8 | High | 2023-04-13 |
| CVE-2023-21582 | Adobe Digital Editions 缓冲区错误漏洞 — Digital Editions | 7.8 | High | 2023-04-12 |
| CVE-2023-26372 | Adobe Dimension 缓冲区错误漏洞 — Dimension | 7.8 | High | 2023-04-12 |
| CVE-2023-26373 | Adobe Dimension 缓冲区错误漏洞 — Dimension | 7.8 | High | 2023-04-12 |
| CVE-2023-26395 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2023-04-12 |
| CVE-2023-1801 | tcpdump 缓冲区错误漏洞 — tcpdump | 8.1 | - | 2023-04-07 |
| CVE-2023-0186 | NVIDIA GPU Display Driver for Windows 缓冲区错误漏洞 — vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) | 6.1 | Medium | 2023-04-01 |
| CVE-2023-0183 | NVIDIA GPU Display Driver for Linux 缓冲区错误漏洞 — vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) | 7.1 | High | 2023-04-01 |
| CVE-2023-0182 | NVIDIA GPU Display Driver for Windows 缓冲区错误漏洞 — vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) | 7.8 | High | 2023-04-01 |
| CVE-2022-28300 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation | 7.8 | - | 2023-03-29 |
| CVE-2022-28301 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-28314 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-28316 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-28318 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-28642 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-28643 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-28644 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-28646 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2023-03-29 |
| CVE-2022-37354 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37355 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37356 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37357 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37358 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37362 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37364 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37369 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37371 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-37372 | PDF-XChange Editor 缓冲区错误漏洞 — PDF-XChange Editor | 7.8 | - | 2023-03-29 |
| CVE-2022-43614 | Corel CorelDRAW Graphics Suite 缓冲区错误漏洞 — CorelDRAW Graphics Suite | 7.8 | - | 2023-03-29 |
| CVE-2022-43617 | Corel CorelDRAW Graphics Suite 缓冲区错误漏洞 — CorelDRAW Graphics Suite | 7.8 | - | 2023-03-29 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3164 条 CVE 漏洞。