Falhas do tipo CWE-787
5.232 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2023-20829MEDIUMIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2022-47452MEDIUMIn gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan seEPSS 0.1%CVE-2023-32839MEDIUMIn dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege withEPSS 0.1%CVE-2024-29746HIGHIn lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation oEPSS 0.1%CVE-2023-20831MEDIUMIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2025-20721HIGHIn imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mEPSS 0.1%CVE-2023-32822MEDIUMIn ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2025-20723HIGHIn gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege iEPSS 0.1%CVE-2024-29752HIGHIn tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalEPSS 0.1%CVE-2023-20822MEDIUMIn netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SEPSS 0.1%CVE-2023-20749MEDIUMIn swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2023-20832MEDIUMIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2022-38675MEDIUMIn gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2023-20949MEDIUMIn s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to localEPSS 0.1%CVE-2023-32877MEDIUMIn battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysEPSS 0.1%CVE-2017-13323HIGHIn String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privEPSS 0.1%CVE-2022-47364MEDIUMIn wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan seEPSS 0.1%CVE-2022-47368MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2023-20812MEDIUMIn wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure wiEPSS 0.1%CVE-2023-20967HIGHIn avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead toEPSS 0.1%