Falhas do tipo CWE-787

5.225 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2022-42502MEDIUMIn FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalEPSS 0.1%CVE-2026-18739LOWPopt-devel: popt-static: off-by-one in poptstuffargsEPSS 0.1%CVE-2022-42501MEDIUMIn HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation oEPSS 0.1%CVE-2022-32611MEDIUMIn isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2022-32603MEDIUMIn gpu drm, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with EPSS 0.1%CVE-2025-20715HIGHIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegEPSS 0.1%CVE-2025-20716HIGHIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegEPSS 0.1%CVE-2022-20462HIGHIn phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to lEPSS 0.1%CVE-2019-25658MEDIUMa-Mac Address Change 5.4 Local Buffer Overflow DoSEPSS 0.1%CVE-2026-79906HIGHSubstance3D - Modeler | Out-of-bounds Write (CWE-787)EPSS 0.1%CVE-2025-40809HIGHA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update EPSS 0.1%CVE-2026-83963HIGHSubstance3D - Modeler | Out-of-bounds Write (CWE-787)EPSS 0.1%CVE-2026-81998HIGHSubstance3D - Modeler | Out-of-bounds Write (CWE-787)EPSS 0.1%CVE-2025-40810HIGHA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update EPSS 0.1%CVE-2022-32646MEDIUMIn gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System eEPSS 0.1%CVE-2022-32605MEDIUMIn isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2024-28970MEDIUMDell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentiallyEPSS 0.1%CVE-2025-23275MEDIUMNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds writEPSS 0.1%CVE-2022-32599MEDIUMIn rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System executioEPSS 0.1%CVE-2019-25598MEDIUMHeidiSQL Portable 10.1.0.5464 Denial of Service via Buffer OverflowEPSS 0.1%