Falhas do tipo CWE-787
5.227 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2019-25598MEDIUMHeidiSQL Portable 10.1.0.5464 Denial of Service via Buffer OverflowEPSS 0.1%CVE-2024-28970MEDIUMDell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentiallyEPSS 0.1%CVE-2022-32598MEDIUMIn widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withEPSS 0.1%CVE-2022-32597MEDIUMIn widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withEPSS 0.1%CVE-2022-32596MEDIUMIn widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-15997LOWNative ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded stateEPSS 0.1%CVE-2022-32622MEDIUMIn gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System exeEPSS 0.1%CVE-2026-0124CRITICALThere is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional eEPSS 0.1%CVE-2023-20905HIGHIn Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to locEPSS 0.1%CVE-2026-47573HIGHNVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulneraEPSS 0.1%CVE-2026-47530HIGHNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-boEPSS 0.1%CVE-2026-47553HIGHNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an EPSS 0.1%CVE-2026-47523HIGHNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-boEPSS 0.1%CVE-2024-20146HIGHIn wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) EPSS 0.1%CVE-2026-47548HIGHNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-boEPSS 0.1%CVE-2026-47561HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validatEPSS 0.1%CVE-2026-92382MEDIUMUsbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds writeEPSS 0.1%CVE-2026-80431MEDIUMOut-of-bounds write in the kitty text sizing protocol allows termination of the terminal processEPSS 0.1%CVE-2026-53148HIGHthunderbolt: Clamp XDomain response data copy to allocation sizeEPSS 0.1%CVE-2022-32619MEDIUMIn keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wiEPSS 0.1%