Falhas do tipo CWE-787

5.228 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2024-49835HIGHOut-of-bounds Write in SPS ApplicationsEPSS 0.1%CVE-2025-21441HIGHOut-of-bounds Read in Windows WLAN HostEPSS 0.1%CVE-2023-32832HIGHIn video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additionalEPSS 0.1%CVE-2025-21467HIGHOut-of-bounds Write in Computer VisionEPSS 0.1%CVE-2024-27204HIGHIn tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation oEPSS 0.1%CVE-2025-21468HIGHOut-of-bounds Write in Computer VisionEPSS 0.1%CVE-2025-21440HIGHOut-of-bounds Read in Windows WLAN HostEPSS 0.1%CVE-2024-27219HIGHIn tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilEPSS 0.1%CVE-2025-21462HIGHOut-of-bounds Write in Computer VisionEPSS 0.1%CVE-2024-27208HIGHthere is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional eEPSS 0.1%CVE-2025-21439HIGHOut-of-bounds Read in Windows WLAN HostEPSS 0.1%CVE-2024-20001MEDIUMIn TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysteEPSS 0.1%CVE-2024-49739MEDIUMIn MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation ofEPSS 0.1%CVE-2022-39882HIGHHeap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker toEPSS 0.1%CVE-2023-48421HIGHIn gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possiblEPSS 0.1%CVE-2025-48638HIGHIn __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalaEPSS 0.1%CVE-2025-48623HIGHIn init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalatiEPSS 0.1%CVE-2018-9389MEDIUMIn ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to locaEPSS 0.1%CVE-2024-23698HIGHIn RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to lEPSS 0.1%CVE-2024-20016MEDIUMIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System executionEPSS 0.1%