Falhas do tipo CWE-787
5.228 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2022-48382MEDIUMIn log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2022-48381MEDIUMIn modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service wEPSS 0.1%CVE-2026-47601HIGHNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unpriEPSS 0.1%CVE-2022-2984MEDIUMIn jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2024-20020MEDIUMIn OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with SysEPSS 0.1%CVE-2026-17052HIGHMissing user-pointer validation in tgpio_pin_read_ts_ec syscall handler allows arbitrary supervisor-memory write from userspaceEPSS 0.1%CVE-2025-20696MEDIUMIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attackEPSS 0.1%CVE-2026-56711HIGHVLC media player 3.0.0 through 3.0.23 memory corruption vulnerabilityEPSS 0.1%CVE-2022-39106MEDIUMIn sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneEPSS 0.1%CVE-2026-47582HIGHNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A EPSS 0.1%CVE-2026-20879HIGHOut-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device DriversEPSS 0.1%CVE-2025-27243MEDIUMOut-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS maEPSS 0.1%CVE-2022-39133MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42755MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2026-0106CRITICALIn vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of pEPSS 0.1%CVE-2022-39132MEDIUMIn camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneEPSS 0.1%CVE-2026-95520HIGHRpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packagesEPSS 0.1%CVE-2025-27713HIGHOut-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation ofEPSS 0.1%CVE-2019-25485MEDIUMR 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR BypassEPSS 0.1%CVE-2019-25549MEDIUMVeryPDF PCL Converter 2.7 Denial of Service via PDF SecurityEPSS 0.1%