CWE-787 跨界内存写 类弱点 3163 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-46576 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2022-02-18 |
| CVE-2021-46574 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2022-02-18 |
| CVE-2021-46572 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2022-02-18 |
| CVE-2021-46569 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2022-02-18 |
| CVE-2021-46568 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2022-02-18 |
| CVE-2021-46564 | Bentley Systems MicroStation 缓冲区错误漏洞 — MicroStation CONNECT | 7.8 | - | 2022-02-18 |
| CVE-2021-4090 | Linux kernel 缓冲区错误漏洞 — kernel | 7.1 | - | 2022-02-18 |
| CVE-2022-23200 | Adobe After Effects 缓冲区错误漏洞 — After Effects | 7.8 | - | 2022-02-16 |
| CVE-2022-23186 | Adobe Illustrator 缓冲区错误漏洞 — Illustrator | 7.8 | High | 2022-02-16 |
| CVE-2021-22788 | Schneider Electric 多款产品缓冲区错误漏洞 — Modicon M340 CPUs: BMXP34 (Versions prior to V3.40), Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H), BMXNOE0110 (H), BMXNOC0401, BMXNOR0200H RTU (All Versions), Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634, TSXP575634, TSXP576634 (All Versions), Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions), Modicon Quantum Communication Modules: 140NOE771x1, 140NOC78x00, 140NOC77101 (All Versions), Modicon Premium Communication Modules: TSXETY4103, TSXETY5103 (All Versions) | 7.5 | - | 2022-02-11 |
| CVE-2021-46161 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap V2020.2 | 7.8 | - | 2022-02-09 |
| CVE-2021-46160 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap V2020.2 | 7.8 | - | 2022-02-09 |
| CVE-2021-46159 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap V2020.2 | 7.8 | - | 2022-02-09 |
| CVE-2021-46156 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap V2020.2 | 7.8 | - | 2022-02-09 |
| CVE-2021-46151 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap V2020.2 | 7.8 | - | 2022-02-09 |
| CVE-2022-23561 | Google TensorFlow 缓冲区错误漏洞 — tensorflow | 8.8 | High | 2022-02-04 |
| CVE-2022-23566 | Google TensorFlow 缓冲区错误漏洞 — tensorflow | 8.8 | High | 2022-02-04 |
| CVE-2021-21971 | Sealevel Systems SeaConnect 370W 缓冲区错误漏洞 — Sealevel | 8.1 | - | 2022-02-04 |
| CVE-2021-4034 | polkit 缓冲区错误漏洞 — polkit | 7.8 | - | 2022-01-28 |
| CVE-2021-45061 | Adobe Acrobat Reader Dc 缓冲区错误漏洞 — Acrobat Reader | 7.8 | - | 2022-01-14 |
| CVE-2021-44707 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2022-01-14 |
| CVE-2021-45068 | Adobe Acrobat Reader Dc 缓冲区错误漏洞 — Acrobat Reader | 7.8 | - | 2022-01-14 |
| CVE-2021-44743 | Adobe Bridge 缓冲区错误漏洞 — Bridge | 7.8 | - | 2022-01-14 |
| CVE-2021-34940 | Bentley Systems Bentley View 缓冲区错误漏洞 — View | 7.8 | - | 2022-01-13 |
| CVE-2021-34935 | Bentley Systems Bentley View 缓冲区错误漏洞 — View | 7.8 | - | 2022-01-13 |
| CVE-2021-34932 | Bentley Systems Bentley View 缓冲区错误漏洞 — View | 7.8 | - | 2022-01-13 |
| CVE-2021-34929 | Bentley Systems Bentley View 缓冲区错误漏洞 — View | 7.8 | - | 2022-01-13 |
| CVE-2021-34928 | Bentley Systems Bentley View 缓冲区错误漏洞 — View | 7.8 | - | 2022-01-13 |
| CVE-2021-34926 | Bentley Systems Bentley View 缓冲区错误漏洞 — View | 7.8 | - | 2022-01-13 |
| CVE-2021-34924 | Bentley Systems Bentley View 缓冲区错误漏洞 — View | 7.8 | - | 2022-01-13 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3163 条 CVE 漏洞。