CWE-787 跨界内存写 类弱点 3163 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-3379 | Horner Automation Cscape 缓冲区错误漏洞 — Cscape | 7.8 | High | 2022-10-27 |
| CVE-2022-41743 | 多款F5产品 缓冲区错误漏洞 — NGINX Plus | 7.0 | High | 2022-10-19 |
| CVE-2022-41742 | F5 Nginx 缓冲区错误漏洞 — NGINX | 7.1 | High | 2022-10-19 |
| CVE-2022-41741 | F5 Nginx 缓冲区错误漏洞 — NGINX | 7.0 | High | 2022-10-19 |
| CVE-2022-39260 | Git 缓冲区错误漏洞 — git | 8.5 | High | 2022-10-19 |
| CVE-2022-41686 | OpenHarmony 缓冲区错误漏洞 — OpenHarmony | 5.1 | Medium | 2022-10-14 |
| CVE-2022-2984 | Google Android 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-38676 | UNISOC chipset 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-32234 | Facebook Hermes 缓冲区错误漏洞 — Hermes | 9.8 | - | 2022-10-11 |
| CVE-2022-3396 | Omron CX-Programmer 缓冲区错误漏洞 — CX-Programmer | 7.8 | High | 2022-10-06 |
| CVE-2022-3398 | Omron CX-Programmer 缓冲区错误漏洞 — CX-Programmer | 7.8 | High | 2022-10-06 |
| CVE-2022-3397 | Omron CX-Programmer 缓冲区错误漏洞 — CX-Programmer | 7.8 | High | 2022-10-06 |
| CVE-2022-20769 | Cisco Wireless LAN Controller 缓冲区错误漏洞 — Cisco Wireless LAN Controller (WLC) | 7.4 | High | 2022-09-30 |
| CVE-2022-34424 | Dell SmartFabric OS10 缓冲区错误漏洞 — Dell Networking OS10 | 7.5 | High | 2022-09-28 |
| CVE-2022-35700 | Adobe Bridge 缓冲区错误漏洞 — Bridge | 7.8 | - | 2022-09-19 |
| CVE-2022-35699 | Adobe Bridge 缓冲区错误漏洞 — Bridge | 7.8 | - | 2022-09-19 |
| CVE-2022-35701 | Adobe Bridge 缓冲区错误漏洞 — Bridge | 7.8 | - | 2022-09-19 |
| CVE-2022-35939 | Google TensorFlow 缓冲区错误漏洞 — tensorflow | 7.0 | High | 2022-09-16 |
| CVE-2022-28852 | 多款 Adobe InDesign 产品 缓冲区错误漏洞 — InDesign | 7.8 | High | 2022-09-16 |
| CVE-2022-28853 | Adobe InDesign 缓冲区错误漏洞 — InDesign | 7.8 | High | 2022-09-16 |
| CVE-2022-35713 | Adobe Photoshop 缓冲区错误漏洞 — Photoshop | 7.8 | High | 2022-09-16 |
| CVE-2022-40659 | Nikon NIS-Elements Viewer 缓冲区错误漏洞 — NIS-Elements Viewer | 7.8 | - | 2022-09-15 |
| CVE-2022-40658 | Nikon NIS-Elements Viewer 缓冲区错误漏洞 — NIS-Elements Viewer | 7.8 | - | 2022-09-15 |
| CVE-2022-40657 | Nikon NIS-Elements Viewer 缓冲区错误漏洞 — NIS-Elements Viewer | 7.8 | - | 2022-09-15 |
| CVE-2022-40654 | Ansys SpaceClaim 缓冲区错误漏洞 — SpaceClaim | 7.8 | - | 2022-09-15 |
| CVE-2022-40653 | Ansys SpaceClaim 缓冲区错误漏洞 — SpaceClaim | 7.8 | - | 2022-09-15 |
| CVE-2022-40652 | Ansys SpaceClaim 缓冲区错误漏洞 — SpaceClaim | 7.8 | - | 2022-09-15 |
| CVE-2022-40651 | Ansys SpaceClaim 缓冲区错误漏洞 — SpaceClaim | 7.8 | - | 2022-09-15 |
| CVE-2022-40650 | Ansys SpaceClaim 缓冲区错误漏洞 — SpaceClaim | 7.8 | - | 2022-09-15 |
| CVE-2022-40648 | Ansys SpaceClaim 缓冲区错误漏洞 — SpaceClaim | 7.8 | - | 2022-09-15 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3163 条 CVE 漏洞。