Falhas do tipo CWE-787
5.232 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2023-20653MEDIUMIn keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with EPSS 0.1%CVE-2023-20658MEDIUMIn isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2023-20716MEDIUMIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2023-20694MEDIUMIn preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SEPSS 0.1%CVE-2023-20725MEDIUMIn preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SEPSS 0.1%CVE-2023-20654MEDIUMIn keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with EPSS 0.1%CVE-2022-32647MEDIUMIn ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-32883MEDIUMIn Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiEPSS 0.1%CVE-2022-48387MEDIUMthe apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysEPSS 0.1%CVE-2023-20715MEDIUMIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2022-32636MEDIUMIn keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with SysEPSS 0.1%CVE-2023-32891MEDIUMIn bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of priviEPSS 0.1%CVE-2023-20681MEDIUMIn adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with SysEPSS 0.1%CVE-2023-20652MEDIUMIn keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with EPSS 0.1%CVE-2023-20752MEDIUMIn keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SyEPSS 0.1%CVE-2025-27061HIGHOut-of-bounds Write in VideoEPSS 0.1%CVE-2024-29743HIGHIn tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of EPSS 0.1%CVE-2023-20712MEDIUMIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2025-20721HIGHIn imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mEPSS 0.1%CVE-2023-32822MEDIUMIn ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%