CWE-788 在缓冲区结束位置之后访问内存 类弱点 140 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-788是缓冲区后访问漏洞，指程序通过索引或指针访问缓冲区末尾之外的内存区域。攻击者常利用此缺陷读取敏感数据或执行任意代码，导致信息泄露或系统崩溃。开发者应避免此类问题，需严格验证指针算术运算和索引边界，确保访问范围始终在缓冲区合法界限内，并采用安全编码规范进行内存管理。
void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-20585 | Microsoft Input-Output Memory Management Unit 安全漏洞 — AMD EPYC™ 7003 Series Processors | 4.6 | - | 2026-04-16 |
| CVE-2026-20052 | Cisco Secure Firewall Threat Defense 安全漏洞 — Cisco Secure Firewall Threat Defense (FTD) Software | 5.8 | Medium | 2026-03-04 |
| CVE-2026-21316 | Adobe Audition 安全漏洞 — Audition | 5.5 | Medium | 2026-02-10 |
| CVE-2025-36581 | Dell PowerEdge Platform 14G AMD BIOS 安全漏洞 — PowerEdge | 3.8 | Low | 2025-08-14 |
| CVE-2025-43580 | Adobe Audition 安全漏洞 — Audition | 5.5 | Medium | 2025-07-08 |
| CVE-2024-20402 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 8.6 | High | 2024-10-23 |
| CVE-2024-20330 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software | 8.6 | High | 2024-10-23 |
| CVE-2024-42425 | Dell Precision Rack BIOS 安全漏洞 — Dell Precision Rack BIOS | 3.8 | Low | 2024-09-10 |
| CVE-2024-38304 | Dell PowerEdge Platform 安全漏洞 — PowerEdge Platform | 3.8 | Low | 2024-08-29 |
| CVE-2024-21618 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 6.5 | Medium | 2024-04-12 |
| CVE-2024-0074 | NVIDIA GPU Display Driver 安全漏洞 — GPU Display driver, vGPU driver, Cloud Gaming driver | 7.1 | High | 2024-03-27 |
| CVE-2024-0173 | Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 安全漏洞 — PowerEdge Platform | 3.8 | Low | 2024-03-13 |
| CVE-2024-0154 | Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 安全漏洞 — PowerEdge Platform | 3.8 | Low | 2024-03-13 |
| CVE-2023-20169 | Cisco 多款产品输入验证错误漏洞 — Cisco NX-OS Software | 7.4 | High | 2023-08-23 |
| CVE-2023-25506 | NVIDIA DGX-1 缓冲区错误漏洞 — NVIDIA DGX servers | 7.5 | High | 2023-04-22 |
| CVE-2023-0200 | NVIDIA DGX-2 缓冲区错误漏洞 — NVIDIA DGX servers | 7.5 | High | 2023-04-22 |
| CVE-2023-0103 | LS ELECTRIC XBC-DN32U 安全漏洞 — XBC-DN32U | 7.5 | High | 2023-02-15 |
| CVE-2021-42735 | Adobe Photoshop 缓冲区错误漏洞 — Photoshop | 7.8 | High | 2022-06-15 |
| CVE-2021-42732 | Adobe InDesign 缓冲区错误漏洞 — InDesign | 7.8 | High | 2022-06-15 |
| CVE-2021-40727 | Adobe InDesign 安全漏洞 — InDesign | 7.8 | High | 2022-06-15 |
| CVE-2022-1451 | radare2 缓冲区错误漏洞 — radareorg/radare2 | 7.1 | - | 2022-04-24 |
| CVE-2021-40735 | Adobe Audition 缓冲区错误漏洞 — Audition | 7.8 | - | 2022-03-16 |
| CVE-2021-40738 | Adobe Audition 缓冲区错误漏洞 — Audition | 7.8 | High | 2022-03-16 |
| CVE-2021-40734 | Adobe Audition 缓冲区错误漏洞 — Audition | 7.8 | - | 2022-03-16 |
| CVE-2021-40740 | Adobe Audition 缓冲区错误漏洞 — Audition | 7.8 | High | 2022-03-16 |
| CVE-2021-40741 | Adobe Audition 安全漏洞 — Audition | 5.5 | - | 2022-03-16 |
| CVE-2021-40739 | Adobe Audition 缓冲区错误漏洞 — Audition | 7.8 | High | 2022-03-16 |
| CVE-2021-40736 | Adobe Audition 缓冲区错误漏洞 — Audition | 7.8 | - | 2022-03-16 |
| CVE-2021-40793 | Adobe Premiere Pro 缓冲区错误漏洞 — Premiere | 7.8 | High | 2022-03-16 |
| CVE-2021-40765 | Adobe Character Animator 缓冲区错误漏洞 — Character Animator (Preview 4) | 7.8 | High | 2022-03-16 |
CWE-788（在缓冲区结束位置之后访问内存） 是常见的弱点类别，本平台收录该类弱点关联的 140 条 CVE 漏洞。