Fallos del tipo CWE-787

5232 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em uma posição de memória fora do intervalo alocado para um buffer, array ou estrutura. O atacante aproveita para sobrescrever dados adjacentes (variáveis, ponteiros, pilha de retorno), alterando o comportamento da aplicação ou assumindo controle total do sistema.

Ejemplo

Um programa lê 256 bytes de entrada do usuário e copia para um buffer de 64 bytes sem validação. O atacante envia 300 bytes, que transbordam o buffer e sobrescrevem o endereço de retorno na pilha, permitindo execução de código arbitrário.

Cómo mitigar

Sempre validar tamanho de entrada contra o limite do buffer antes de copiar (usar strncpy, snprintf em vez de strcpy, sprintf). Em linguagens modernas, usar estruturas bounds-checked (Rust, C# arrays) ou linters que detectem padrões perigosos.

CVE-2024-22012HIGHthere is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional eEPSS 0.1%CVE-2025-20795HIGHIn KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a EPSS 0.1%CVE-2025-20798HIGHIn battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malEPSS 0.1%CVE-2018-9368MEDIUMIn mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This couEPSS 0.1%CVE-2025-21461HIGHOut-of-bounds Write in Camera_LinuxEPSS 0.1%CVE-2022-47365MEDIUMIn wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan seEPSS 0.1%CVE-2018-9370HIGHIn download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounEPSS 0.1%CVE-2025-36908MEDIUMIn lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lEPSS 0.1%CVE-2022-48234MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2023-52351HIGHIn ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2022-38676MEDIUMIn gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2024-27221HIGHIn update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priEPSS 0.1%CVE-2024-20090MEDIUMIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2024-20033MEDIUMIn nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with SysEPSS 0.1%CVE-2026-56945HIGHIn VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additionaEPSS 0.1%CVE-2022-48233MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2022-48232MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2023-32838MEDIUMIn dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege withEPSS 0.1%CVE-2025-47367HIGHOut-of-bounds Write in WinBlast DriverEPSS 0.1%CVE-2025-47340HIGHOut-of-bounds Write in DSP ServiceEPSS 0.1%