Falhas do tipo CWE-787
5.231 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2023-21052MEDIUMIn setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to localEPSS 0.1%CVE-2023-32826MEDIUMIn camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privEPSS 0.1%CVE-2026-0122HIGHIn multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additEPSS 0.1%CVE-2023-20734MEDIUMIn vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2023-20656MEDIUMIn geniezone, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System exeEPSS 0.1%CVE-2023-20735MEDIUMIn vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2023-20720MEDIUMIn pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with EPSS 0.1%CVE-2023-20815MEDIUMIn wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege EPSS 0.1%CVE-2023-21022HIGHIn BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation oEPSS 0.1%CVE-2023-20805MEDIUMIn imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-32830MEDIUMIn TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysteEPSS 0.1%CVE-2023-21100HIGHIn inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of priviEPSS 0.1%CVE-2023-32827MEDIUMIn camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privEPSS 0.1%CVE-2023-20814MEDIUMIn wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege EPSS 0.1%CVE-2023-20738MEDIUMIn vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2025-36928HIGHIn GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalaEPSS 0.1%CVE-2023-20804MEDIUMIn imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-20816MEDIUMIn wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege EPSS 0.1%CVE-2025-36930HIGHIn GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioEPSS 0.1%CVE-2023-20936HIGHIn bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escEPSS 0.1%