Falhas do tipo CWE-787

5.228 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2022-42772MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-20235MEDIUMThe PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver iEPSS 0.1%CVE-2023-20797MEDIUMIn camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilegEPSS 0.1%CVE-2025-29935HIGHAn out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated pEPSS 0.1%CVE-2026-10718MEDIUMOpen Seachest/Seachest NVMe Trim (Deallocate) VulnerabilityEPSS 0.1%CVE-2026-19783MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2026-20453MEDIUMIn geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mEPSS 0.1%CVE-2025-20658MEDIUMIn DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physEPSS 0.1%CVE-2019-25467HIGHVerypdf docPrint Pro 8.0 Local SEH Buffer OverflowEPSS 0.1%CVE-2022-20014MEDIUMIn vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege withEPSS 0.1%CVE-2019-25649MEDIUMRiver Past Audio Converter 7.7.16 Local Buffer Overflow DoSEPSS 0.1%CVE-2026-34863MEDIUMOut-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2024-36501MEDIUMMemory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity.EPSS 0.1%CVE-2024-20002MEDIUMIn TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysteEPSS 0.1%CVE-2024-45563MEDIUMOut-of-bounds Write in Camera DriverEPSS 0.1%CVE-2024-45581MEDIUMOut-of-bounds Write in AudioEPSS 0.1%CVE-2026-16513HIGHMissing write validation of user-supplied handle pointer in the RTIO syscall verifier allows arbitrary kernel writeEPSS 0.1%CVE-2026-19398MEDIUMAn out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSEPSS 0.1%CVE-2024-20013MEDIUMIn keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with EPSS 0.1%CVE-2023-33905MEDIUMIn iwnpi server, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysEPSS 0.1%