CWE-787 跨界内存写 类弱点 3163 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-23456 | UPX 缓冲区错误漏洞 | 5.3 | Medium | 2023-01-12 |
| CVE-2022-44431 | Google Android OS和unisoc部分产品缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2023-01-04 |
| CVE-2023-0054 | Vim 缓冲区错误漏洞 — vim/vim | 7.8 | - | 2023-01-04 |
| CVE-2022-34671 | NVIDIA GPU Display Driver for Windows 缓冲区错误漏洞 — NVIDIA GPU Display Driver for Windows | 8.5 | High | 2022-12-30 |
| CVE-2022-42255 | NVIDIA GPU Display Driver 输入验证错误漏洞 — vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) | 5.3 | Medium | 2022-12-30 |
| CVE-2022-42262 | NVIDIA vGPU Software 安全漏洞 — vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) | 7.1 | High | 2022-12-30 |
| CVE-2022-41992 | PowerISO 缓冲区错误漏洞 — PowerISO | 7.8 | - | 2022-12-19 |
| CVE-2022-3775 | grub2 缓冲区错误漏洞 — grub2 | 7.7 | - | 2022-12-19 |
| CVE-2022-41283 | Siemens部分产品 缓冲区错误漏洞 — JT2Go | 7.8 | High | 2022-12-13 |
| CVE-2022-46345 | Siemens Parasolid 缓冲区错误漏洞 — Parasolid V33.1 | 7.8 | High | 2022-12-13 |
| CVE-2022-46346 | Siemens Parasolid 缓冲区错误漏洞 — Parasolid V33.1 | 7.8 | High | 2022-12-13 |
| CVE-2022-46347 | Siemens Parasolid 缓冲区错误漏洞 — Parasolid V33.1 | 7.8 | High | 2022-12-13 |
| CVE-2022-46348 | Siemens Parasolid 缓冲区错误漏洞 — Parasolid V33.1 | 7.8 | High | 2022-12-13 |
| CVE-2022-23478 | xrdp 缓冲区错误漏洞 — xrdp | 9.1 | Critical | 2022-12-09 |
| CVE-2022-20968 | Cisco IP Phone 缓冲区错误漏洞 — Cisco Session Initiation Protocol (SIP) Software | 8.1 | High | 2022-12-08 |
| CVE-2022-3092 | GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞 — CIMPLICITY | 7.8 | High | 2022-12-07 |
| CVE-2022-39133 | Google Pixel 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8022 | 5.5 | - | 2022-12-06 |
| CVE-2022-41902 | Google TensorFlow 缓冲区错误漏洞 — tensorflow | 7.1 | High | 2022-12-06 |
| CVE-2022-42755 | Google Pixel 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8023 | 5.5 | - | 2022-12-06 |
| CVE-2022-42772 | Google Pixel 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8021 | 5.5 | - | 2022-12-06 |
| CVE-2022-31606 | NVIDIA GPU Display Driver 缓冲区错误漏洞 — NVIDIA Cloud Gaming (guest driver) | 7.8 | High | 2022-11-18 |
| CVE-2022-31610 | NVIDIA GPU Display Driver 缓冲区错误漏洞 — NVIDIA Cloud Gaming (guest driver) | 7.8 | High | 2022-11-18 |
| CVE-2022-41900 | Google TensorFlow 缓冲区错误漏洞 — tensorflow | 7.1 | High | 2022-11-18 |
| CVE-2022-39394 | Wasmtime 缓冲区错误漏洞 — wasmtime | 3.8 | Low | 2022-11-10 |
| CVE-2021-34569 | WAGO 缓冲区错误漏洞 — 750-81xx/xxx-xxxFW | 9.8 | Critical | 2022-11-09 |
| CVE-2022-39882 | SAMSUNG Mobile devices 缓冲区错误漏洞 — Samsung Mobile Devices | 8.0 | High | 2022-11-09 |
| CVE-2022-41211 | SAP 3D Visual Enterprise Viewer和SAP 3D Visual Enterprise Author 缓冲区错误漏洞 — SAP 3D Visual Enterprise Author | 7.0 | High | 2022-11-08 |
| CVE-2022-41660 | Siemens JT2Go和Teamcenter Visualization 缓冲区错误漏洞 — JT2Go | 7.8 | High | 2022-11-08 |
| CVE-2022-43397 | Siemens Parasolid 缓冲区错误漏洞 — Parasolid V34.0 | 7.8 | High | 2022-11-08 |
| CVE-2022-42920 | Apache Commons BCEL 缓冲区错误漏洞 — Apache Commons BCEL | 9.8 | - | 2022-11-07 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3163 条 CVE 漏洞。