Falhas do tipo CWE-787
5.228 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2026-0035HIGHIn createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic erEPSS 0.1%CVE-2026-58088HIGHRace condition in ELF core dump segment countingEPSS 0.1%CVE-2026-20410MEDIUMIn imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a maliEPSS 0.1%CVE-2026-21090MEDIUMOut-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.EPSS 0.1%CVE-2021-39661HIGHIn _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. ThEPSS 0.1%CVE-2023-20696MEDIUMIn preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SEPSS 0.1%CVE-2024-27212HIGHIn init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiEPSS 0.1%CVE-2023-32848MEDIUMIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System executiEPSS 0.1%CVE-2026-21091MEDIUMOut-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.EPSS 0.1%CVE-2026-55597MEDIUMImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of argumentsEPSS 0.1%CVE-2026-102757HIGHAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,EPSS 0.1%CVE-2024-20023MEDIUMIn flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System eEPSS 0.1%CVE-2022-20582HIGHIn ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local EPSS 0.1%CVE-2023-20850MEDIUMIn imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilEPSS 0.1%CVE-2023-20842MEDIUMIn imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilEPSS 0.1%CVE-2024-23715HIGHIn PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalatioEPSS 0.1%CVE-2023-20841MEDIUMIn imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege wEPSS 0.1%CVE-2023-20840MEDIUMIn imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of prEPSS 0.1%CVE-2018-9405MEDIUMIn BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local esEPSS 0.1%CVE-2023-40110MEDIUMIn multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escaEPSS 0.1%