Falhas do tipo CWE-787

5.232 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2024-22012HIGHthere is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional eEPSS 0.1%CVE-2025-20795HIGHIn KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a EPSS 0.1%CVE-2025-20798HIGHIn battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malEPSS 0.1%CVE-2018-9368MEDIUMIn mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This couEPSS 0.1%CVE-2025-21461HIGHOut-of-bounds Write in Camera_LinuxEPSS 0.1%CVE-2022-47365MEDIUMIn wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan seEPSS 0.1%CVE-2018-9370HIGHIn download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounEPSS 0.1%CVE-2025-36908MEDIUMIn lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lEPSS 0.1%CVE-2022-48234MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2023-52351HIGHIn ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2022-38676MEDIUMIn gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2024-27221HIGHIn update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priEPSS 0.1%CVE-2024-20090MEDIUMIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2024-20033MEDIUMIn nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with SysEPSS 0.1%CVE-2026-56945HIGHIn VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additionaEPSS 0.1%CVE-2022-48233MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2022-48232MEDIUMIn FM service , there is a possible missing params check. This could lead to local denial of service in FM service .EPSS 0.1%CVE-2023-32838MEDIUMIn dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege withEPSS 0.1%CVE-2025-47367HIGHOut-of-bounds Write in WinBlast DriverEPSS 0.1%CVE-2025-47340HIGHOut-of-bounds Write in DSP ServiceEPSS 0.1%