Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-787 (跨界内存写) — Vulnerability Class 2200

2200 vulnerabilities classified as CWE-787 (跨界内存写). AI Chinese analysis included.

CWE-787 represents a critical memory management weakness where software incorrectly writes data beyond the allocated boundaries of a buffer. This flaw typically arises from insufficient bounds checking, allowing attackers to overwrite adjacent memory locations with malicious payloads. Exploitation often leads to arbitrary code execution, denial of service, or privilege escalation by corrupting critical system structures or control flow data. Developers mitigate this risk by implementing rigorous input validation and utilizing safe programming practices that enforce strict boundary checks before any memory operation. Employing modern languages with automatic memory management, such as Rust or Java, further reduces exposure by preventing direct pointer arithmetic. Additionally, static analysis tools and fuzzing techniques help identify potential out-of-bounds conditions during the development lifecycle, ensuring that buffer operations remain within their intended limits and preserving application integrity against memory corruption attacks.

MITRE CWE Description
The product writes data past the end, or before the beginning, of the intended buffer.
Common Consequences (3)
IntegrityModify Memory, Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
AvailabilityDoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
OtherUnexpected State
Subsequent write operations can produce undefined or unexpected results.
Mitigations (5)
RequirementsUse a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow protection, but the protection can be disabled by the programmer. Be wary that a lan…
Architecture and DesignUse a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. Examples include the Safe C String Library (SafeStr) by Messier and Viega [REF-57], and the Strsafe.h library from Microsoft [REF-56]. These libraries provide safer versions of overflow-prone string-handling functions.
Operation, Build and CompilationUse automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
ImplementationConsider adhering to the following rules when allocating and managing an application's memory: Double check that the buffer is as large as specified. When using functions that accept a number of bytes to copy, such as strncpy(), be aware that if the destination buffer size is equal to the source buffer size, it may not NULL-terminate the string. Check buffer boundaries if accessing the buffer in a…
Operation, Build and CompilationRun or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code. Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported…
Effectiveness: Defense in Depth
Examples (2)
The following code attempts to save four different identification numbers into an array.
int id_sequence[3]; /* Populate the id array. */ id_sequence[0] = 123; id_sequence[1] = 234; id_sequence[2] = 345; id_sequence[3] = 456;
Bad · C
In the following code, it is possible to request that memcpy move a much larger segment of memory than assumed:
int returnChunkSize(void *) { /* if chunk info is valid, return the size of usable memory, * else, return -1 to indicate an error */ ... } int main() { ... memcpy(destBuf, srcBuf, (returnChunkSize(destBuf)-1)); ... }
Bad · C
CVE IDTitleCVSSSeverityPublished
CVE-2024-20121 MediaTek Chipsets 安全漏洞 — MT6765, MT6768, MT6833, MT6835, MT6853, MT6855, MT6879, MT6886, MT6893, MT6983, MT6989, MT8321, MT8385, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798 6.7AIMediumAI2024-11-04
CVE-2024-20120 MediaTek Chipsets 安全漏洞 — MT6765, MT6768, MT6833, MT6835, MT6853, MT6855, MT6879, MT6886, MT6893, MT6983, MT8321, MT8385, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798 6.7AIMediumAI2024-11-04
CVE-2024-20115 MediaTek Chipsets 安全漏洞 — MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195 6.7AIMediumAI2024-11-04
CVE-2024-20114 MediaTek Chipsets 安全漏洞 — MT6765, MT6768, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195 6.7AIMediumAI2024-11-04
CVE-2024-20113 MediaTek Chipsets 安全漏洞 — MT6765, MT6768, MT8188, MT8195 6.7AIMediumAI2024-11-04
CVE-2024-20111 MediaTek Chipsets 安全漏洞 — MT6765, MT6768, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195 6.7AIMediumAI2024-11-04
CVE-2024-20110 MediaTek Chipsets 安全漏洞 — MT6765, MT6768, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195 6.7AIMediumAI2024-11-04
CVE-2024-20109 MediaTek Chipsets 安全漏洞 — MT6765, MT6768, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8188, MT8195 6.7AIMediumAI2024-11-04
CVE-2024-20108 MediaTek Chipsets 安全漏洞 — MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6896, MT6897, MT6983, MT6985, MT6989, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8370, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798 6.7AIMediumAI2024-11-04
CVE-2024-20104 MediaTek Chipsets 安全漏洞 — MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8370, MT8390, MT8676 7.3AIHighAI2024-11-04
CVE-2024-10573 Mpg123: buffer overflow when writing decoded pcm samples 6.7 Medium2024-10-31
CVE-2024-9419 Certain HP Print Products–Potential Remote Code Execution and/or Elevation of Privilege with the HP Smart Universal Printing Driver — HP Smart Universal Printing Driver 7.8 High2024-10-30
CVE-2024-10487 Google Chrome 安全漏洞 — Chrome 8.8AIHighAI2024-10-29
CVE-2024-7991 Autodesk AutoCAD DWG Out-of-Bounds Write Code Execution Vulnerability — AutoCAD 7.8 High2024-10-29
CVE-2024-9996 Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Write Code Execution Vulnerability — AutoCAD 7.8 High2024-10-29
CVE-2024-8596 Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Code Execution Vulnerability — AutoCAD 7.8 High2024-10-29
CVE-2024-8593 Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Code Execution Vulnerability — AutoCAD 7.8 High2024-10-29
CVE-2024-7993 Out-of-Bounds Write Vulnerability in Autodesk Revit — Revit 7.8 High2024-10-16
CVE-2024-47963 Out-of-bounds Write vulnerability in Delta Electronics CNCSoft-G2 — CNCSoft-G2 8.8AIHighAI2024-10-10
CVE-2024-9468 PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet — Cloud NGFW 7.5AIHighAI2024-10-09
CVE-2024-45141 Substance3D - Stager | Out-of-bounds Write (CWE-787) — Substance3D - Stager 7.8 High2024-10-09
CVE-2024-45152 Substance3D - Stager | Out-of-bounds Write (CWE-787) — Substance3D - Stager 7.8 High2024-10-09
CVE-2024-45140 Substance3D - Stager | Out-of-bounds Write (CWE-787) — Substance3D - Stager 7.8 High2024-10-09
CVE-2024-45144 Substance3D - Stager | Out-of-bounds Write (CWE-787) — Substance3D - Stager 7.8 High2024-10-09
CVE-2024-45150 Dimension | Out-of-bounds Write (CWE-787) — Dimension 7.8 High2024-10-09
CVE-2024-45471 Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Teamcenter Visualization V14.2 7.8 High2024-10-08
CVE-2024-45470 Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Teamcenter Visualization V14.2 7.8 High2024-10-08
CVE-2024-45469 Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞 — Teamcenter Visualization V14.2 7.8 High2024-10-08
CVE-2024-45382 Liteos_a has an Out-of-bounds Write vulnerability — OpenHarmony 3.3 Low2024-10-08
CVE-2024-20099 MediaTek 芯片 安全漏洞 — MT6768, MT6833, MT6853, MT6877, MT6893, MT8532 6.7 -2024-10-07

Vulnerabilities classified as CWE-787 (跨界内存写) represent 2200 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.