CWE-787 跨界内存写 类弱点 3163 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-34260 | Adobe Illustrator 缓冲区错误漏洞 — Illustrator | 7.8 | - | 2022-08-11 |
| CVE-2022-35667 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2022-08-11 |
| CVE-2022-28665 | FreshTomato 缓冲区错误漏洞 — FreshTomato | 9.8 | - | 2022-08-05 |
| CVE-2022-28664 | FreshTomato 缓冲区错误漏洞 — FreshTomato | 9.8 | - | 2022-08-05 |
| CVE-2022-27631 | DD-WRT 缓冲区错误漏洞 — DD-WRT | 9.8 | - | 2022-08-05 |
| CVE-2022-26376 | ASUS Asuswrt-Merlin 缓冲区错误漏洞 — Asuswrt-Merlin New Gen | 9.8 | - | 2022-08-05 |
| CVE-2022-33730 | SAMSUNG Mobile devices 缓冲区错误漏洞 — Samsung Mobile Devices | 6.8 | Medium | 2022-08-05 |
| CVE-2022-28668 | Santesoft Sante DICOM Viewer Pro 缓冲区错误漏洞 — DICOM Viewer Pro | 7.8 | - | 2022-08-03 |
| CVE-2022-35222 | HICOS 缓冲区错误漏洞 — HiCOS Citizen verification component - Stack Buffer Overflow | 6.8 | Medium | 2022-08-02 |
| CVE-2022-35219 | National Health Insurance 安全漏洞 — card’s web service component | 5.5 | Medium | 2022-08-02 |
| CVE-2022-35218 | National Health Insurance 安全漏洞 — card’s web service component | 5.5 | Medium | 2022-08-02 |
| CVE-2022-35217 | National Health Insurance 缓冲区错误漏洞 — card’s web service component | 7.8 | High | 2022-08-02 |
| CVE-2022-2598 | Vim 缓冲区错误漏洞 — vim/vim | 6.5 | Medium | 2022-08-01 |
| CVE-2022-1042 | Zephyr 缓冲区错误漏洞 — zephyr | 8.2 | High | 2022-07-26 |
| CVE-2022-1041 | Zephyr 缓冲区错误漏洞 — zephyr | 8.2 | High | 2022-07-26 |
| CVE-2022-32961 | Hicos Citizen Certificate Client-side Component 缓冲区错误漏洞 — HiCOS’ client-side citizen digital certificate | 6.8 | Medium | 2022-07-20 |
| CVE-2022-32960 | Hicos Citizen Certificate Client-side Component 缓冲区错误漏洞 — HiCOS’ client-side citizen digital certificate | 6.8 | Medium | 2022-07-20 |
| CVE-2022-32959 | Hicos Citizen Certificate Client-side Component 安全漏洞 — HiCOS’ client-side citizen digital certificate | 6.8 | Medium | 2022-07-20 |
| CVE-2021-33655 | Linux kernel 缓冲区错误漏洞 — kernel | 8.4 | - | 2022-07-18 |
| CVE-2021-33656 | Linux kernel 缓冲区错误漏洞 — openEuler:kernel | 8.4 | - | 2022-07-18 |
| CVE-2022-34251 | Adobe InCopy 缓冲区错误漏洞 — InCopy | 7.8 | - | 2022-07-15 |
| CVE-2022-34247 | Adobe InDesign 缓冲区错误漏洞 — InDesign | 7.8 | - | 2022-07-15 |
| CVE-2022-34217 | Adobe Acrobat和Adobe Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2022-07-15 |
| CVE-2022-34759 | 多款Schneider Electric产品缓冲区错误漏洞 — OPC UA Modicon Communication Module | 7.5 | High | 2022-07-13 |
| CVE-2022-1737 | EtherNet/IP Adapter 和 EtherNet/IP Scanner 缓冲区错误漏洞 — EtherNet/IP Adapter Development Kit (EADK) | 9.8 | Critical | 2022-07-12 |
| CVE-2022-34748 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap | 8.8 | - | 2022-07-12 |
| CVE-2022-34289 | Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞 — PADS Standard/Plus Viewer | 7.8 | - | 2022-07-12 |
| CVE-2022-34286 | Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞 — PADS Standard/Plus Viewer | 7.8 | - | 2022-07-12 |
| CVE-2022-34284 | Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞 — PADS Standard/Plus Viewer | 7.8 | - | 2022-07-12 |
| CVE-2022-34276 | Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞 — PADS Standard/Plus Viewer | 7.8 | - | 2022-07-12 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3163 条 CVE 漏洞。