Falhas do tipo CWE-787
5.231 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2023-20815MEDIUMIn wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege EPSS 0.1%CVE-2023-20805MEDIUMIn imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-32827MEDIUMIn camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privEPSS 0.1%CVE-2023-20814MEDIUMIn wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege EPSS 0.1%CVE-2023-20738MEDIUMIn vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2025-36930HIGHIn GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioEPSS 0.1%CVE-2024-29749HIGHIn tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioEPSS 0.1%CVE-2022-20427MEDIUMIn (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local escalation of privilEPSS 0.1%CVE-2022-20428MEDIUMIn (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wEPSS 0.1%CVE-2026-21107MEDIUMOut-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.EPSS 0.1%CVE-2022-32635HIGHIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addiEPSS 0.1%CVE-2022-20460MEDIUMIn (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to lEPSS 0.1%CVE-2023-20956MEDIUMIn Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local informatiEPSS 0.1%CVE-2023-20803MEDIUMIn imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with SysEPSS 0.1%CVE-2023-20716MEDIUMIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2025-27044HIGHOut-of-bounds Write in VideoEPSS 0.1%CVE-2022-32636MEDIUMIn keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with SysEPSS 0.1%CVE-2023-20751MEDIUMIn keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SyEPSS 0.1%CVE-2024-29743HIGHIn tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of EPSS 0.1%CVE-2023-20657MEDIUMIn mtee, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%