CWE-787 跨界内存写 类弱点 3163 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-787 越界写入是一种严重的内存安全漏洞，指程序向缓冲区边界之外或起始位置之前写入数据。攻击者利用此缺陷可覆盖相邻内存，导致程序崩溃、数据损坏，甚至通过精心构造的 payload 实现任意代码执行，从而完全控制目标系统。开发者应避免此类风险，需严格实施边界检查，使用安全的内存管理函数，启用编译器防护机制，并遵循最小权限原则，确保所有内存访问均在合法范围内。
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-39829 | Adobe Framemaker 缓冲区错误漏洞 — FrameMaker | 7.8 | - | 2021-09-29 |
| CVE-2021-39831 | Adobe Framemaker 缓冲区错误漏洞 — FrameMaker | 7.8 | High | 2021-09-29 |
| CVE-2021-39825 | Adobe Photoshop 缓冲区错误漏洞 — Photoshop Elements | 7.8 | High | 2021-09-27 |
| CVE-2021-38406 | Delta Electronics DOPSoft 缓冲区错误漏洞 — DOPSoft 2 | 7.8 | High | 2021-09-17 |
| CVE-2021-3751 | Libmobi 缓冲区错误漏洞 — bfabiszewski/libmobi | 9.8 | - | 2021-09-15 |
| CVE-2021-25665 | Simcenter STAR-CCM+ Viewer 缓冲区错误漏洞 — Simcenter STAR-CCM+ Viewer | 7.8 | - | 2021-09-14 |
| CVE-2021-34346 | QNAP NVR缓冲区错误漏洞 — NVR Storage Expansion | 9.8 | Critical | 2021-09-10 |
| CVE-2021-34345 | QNAP NVR 缓冲区错误漏洞 — NVR Storage Expansion | 9.8 | Critical | 2021-09-10 |
| CVE-2021-34344 | QNAP NAS 缓冲区错误漏洞 — QUSBCam2 | 9.8 | Critical | 2021-09-10 |
| CVE-2021-34343 | QNAP NAS 缓冲区错误漏洞 — QTS | 6.0 | Medium | 2021-09-10 |
| CVE-2021-28816 | QNAP NAS 缓冲区错误漏洞 — QTS | 7.6 | High | 2021-09-10 |
| CVE-2021-35994 | Adobe After Effects 缓冲区错误漏洞 — After Effects | 7.8 | High | 2021-09-02 |
| CVE-2021-35993 | Adobe After Effects 缓冲区错误漏洞 — After Effects | 7.8 | High | 2021-09-02 |
| CVE-2021-22791 | 多款 Schneider Electric 产品缓冲区错误漏洞 — Modicon M580 CPU (part numbers BMEP* and BMEH*, all versions), Modicon M340 CPU (part numbers BMXP34*, all versions), Modicon MC80 (part numbers BMKC80*, all versions), Modicon Momentum Ethernet CPU (part numbers 171CBU*, all versions), PLC Simulator for EcoStruxureª Control Expert, including all Unity Pro versions (former name of EcoStruxureª Control Expert, all versions), PLC Simulator for EcoStruxureª Process Expert including all HDCS versions (former name of EcoStruxureª Process Expert, all versions), Modicon Quantum CPU (part numbers 140CPU*, all versions), Modicon Premium CPU (part numbers TSXP5*, all versions) | 6.5 | - | 2021-09-02 |
| CVE-2021-28564 | Adobe Acrobat 缓冲区错误漏洞 — Acrobat Reader | 8.8 | High | 2021-09-02 |
| CVE-2021-28561 | Adobe Acrobat 缓冲区错误漏洞 — Acrobat Reader | 8.8 | High | 2021-09-02 |
| CVE-2021-21086 | Adobe Acrobat 和 Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2021-09-02 |
| CVE-2021-36072 | Adobe Bridge 缓冲区错误漏洞 — Bridge | 7.8 | High | 2021-09-01 |
| CVE-2021-36066 | Adobe Photoshop 缓冲区错误漏洞 — Photoshop | 7.8 | High | 2021-09-01 |
| CVE-2021-3634 | Libssh 缓冲区错误漏洞 — libssh | 5.3 | - | 2021-08-31 |
| CVE-2021-1590 | Cisco NX-OS Software 安全漏洞 — Cisco NX-OS Software | 5.3 | Medium | 2021-08-25 |
| CVE-2021-3713 | QEMU 缓冲区错误漏洞 — QEMU | 7.4 | - | 2021-08-25 |
| CVE-2021-32995 | Horner Automation Cscape 缓冲区错误漏洞 — Cscape | 7.8 | - | 2021-08-25 |
| CVE-2021-28622 | Animate CC 缓冲区错误漏洞 — Animate | 7.8 | - | 2021-08-24 |
| CVE-2021-28607 | Adobe After Effects 缓冲区错误漏洞 — After Effects | 7.8 | High | 2021-08-24 |
| CVE-2021-28605 | Adobe After Effects 缓冲区错误漏洞 — After Effects | 7.8 | High | 2021-08-24 |
| CVE-2021-28602 | Adobe After Effects 缓冲区错误漏洞 — After Effects | 7.8 | High | 2021-08-24 |
| CVE-2021-28596 | Adobe Framemaker 缓冲区错误漏洞 — FrameMaker | 7.8 | High | 2021-08-23 |
| CVE-2021-35990 | Adobe Bridge CC 缓冲区错误漏洞 — Bridge | 7.8 | High | 2021-08-20 |
| CVE-2021-35989 | Adobe Bridge CC 缓冲区错误漏洞 — Bridge | 7.8 | High | 2021-08-20 |
CWE-787（跨界内存写） 是常见的弱点类别，本平台收录该类弱点关联的 3163 条 CVE 漏洞。