目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-787 跨界内存写 类漏洞列表 2750

CWE-787 跨界内存写 类弱点 2750 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。

MITRE CWE 官方描述
CWE：CWE-787 Out-of-bounds Write 英文：The product writes data past the end, or before the beginning, of the intended buffer. 译文：产品将数据写入预期缓冲区（buffer）的末尾之外或起始位置之前。
常见影响 (3)
Integrity Modify Memory, Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other Unexpected State
Subsequent write operations can produce undefined or unexpected results.
缓解措施 (5)
Requirements Use a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow protection, but the protection can be disabled by the programmer. Be wary that a lan…
Architecture and Design Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. Examples include the Safe C String Library (SafeStr) by Messier and Viega [REF-57], and the Strsafe.h library from Microsoft [REF-56]. These libraries provide safer versions of overflow-prone string-handling functions.
Operation, Build and Compilation Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
Implementation Consider adhering to the following rules when allocating and managing an application's memory: Double check that the buffer is as large as specified. When using functions that accept a number of bytes to copy, such as strncpy(), be aware that if the destination buffer size is equal to the source buffer size, it may not NULL-terminate the string. Check buffer boundaries if accessing the buffer in a…
Operation, Build and Compilation Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code. Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported…
Effectiveness: Defense in Depth
代码示例 (2)
The following code attempts to save four different identification numbers into an array.
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;
Bad · C
In the following code, it is possible to request that memcpy move a much larger segment of memory than assumed:
int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }
Bad · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2020-13556 Eipstackgroup Opener 缓冲区错误漏洞 — EIP Stack Group 9.8 - 2020-12-11
CVE-2020-17529 Apache NuttX 缓冲区错误漏洞 — Apache NuttX (incubating) 9.8 - 2020-12-09
CVE-2020-17528 Apache NuttX 缓冲区错误漏洞 — Apache NuttX (incubating) 7.5 - 2020-12-09
CVE-2020-27821 QEMU 缓冲区错误漏洞 — QEMU 6.0 - 2020-12-08
CVE-2020-14305 Linux kernel 缓冲区错误漏洞 — kernel 8.1 - 2020-12-02
CVE-2020-7558 Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞 — IGSS Definition (Def.exe) version 14.0.0.20247 and prior 7.8 - 2020-11-19
CVE-2020-7556 Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞 — IGSS Definition (Def.exe) version 14.0.0.20247 and prior 7.8 - 2020-11-19
CVE-2020-7555 Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞 — IGSS Definition (Def.exe) version 14.0.0.20247 and prior 7.8 - 2020-11-19
CVE-2020-7553 施耐德电气 Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞 — IGSS Definition (Def.exe) version 14.0.0.20247 and prior 7.8 - 2020-11-19
CVE-2020-7552 Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞 — IGSS Definition (Def.exe) version 14.0.0.20247 7.8 - 2020-11-19
CVE-2020-7551 Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞 — IGSS Definition (Def.exe) version 14.0.0.20247 7.8 - 2020-11-19
CVE-2020-7563 多款Schneider Electric产品缓冲区错误漏洞 — Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) 8.8 - 2020-11-18
CVE-2020-24436 Adobe Reader 缓冲区错误漏洞 — Acrobat Reader 7.8 High 2020-11-05
CVE-2020-24411 Adobe Illustrator 缓冲区错误漏洞 — Illustrator 7.8 High 2020-10-20
CVE-2020-17416 Foxit Reader 缓冲区错误漏洞 — Reader 7.8 - 2020-10-13
CVE-2020-17412 mPDF和Foxit PhantomPDF 缓冲区错误漏洞 — PhantomPDF 7.8 - 2020-10-13
CVE-2020-1907 Facebook WhatsApp 缓冲区错误漏洞 — WhatsApp for Android 9.8 - 2020-10-06
CVE-2020-7465 MPD 缓冲区错误漏洞 — MPD: FreeBSD PPP daemon 9.8 - 2020-10-06
CVE-2020-8109 Bitdefender Engines 缓冲区错误漏洞 — Bitdefender Engines 5.9 Medium 2020-10-01
CVE-2020-15212 Google TensorFlow 缓冲区错误漏洞 — tensorflow 8.1 High 2020-09-25
CVE-2020-15214 Google TensorFlow 缓冲区错误漏洞 — tensorflow 8.1 High 2020-09-25
CVE-2020-14390 Linux kernel 缓冲区错误漏洞 — kernel 7.8 - 2020-09-18
CVE-2020-14315 bsdiff 缓冲区错误漏洞 — bsdiff 9.8 - 2020-09-16
CVE-2020-14386 Linux kernel 缓冲区错误漏洞 — kernel 6.7 Medium 2020-09-16
CVE-2020-14331 Linux kernel 缓冲区错误漏洞 — Linux Kernel 6.6 - 2020-09-15
CVE-2020-1912 Facebook Hermes 缓冲区错误漏洞 — Hermes 8.1 - 2020-09-09
CVE-2020-1891 WhatsApp 缓冲区错误漏洞 — WhatsApp Android 9.8 - 2020-09-03
CVE-2020-1894 WhatsApp 缓冲区错误漏洞 — WhatsApp Android 8.8 - 2020-09-03
CVE-2020-7524 Schneider Electric Modicon M218 Logic Controller 缓冲区错误漏洞 — Modicon M218 Logic Controller V5.0.0.7 and prior 7.5 - 2020-08-31
CVE-2020-3415 Cisco NX-OS Software 缓冲区错误漏洞 — Cisco NX-OS Software 8.8 - 2020-08-27

CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 2750 条 CVE 漏洞。