Falhas do tipo CWE-787
5.232 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2018-9393HIGHIn procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds EPSS 0.1%CVE-2018-9400HIGHIn gt1x_debug_write_proc and gt1x_tool_write of
drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c,
there is EPSS 0.1%CVE-2018-9394HIGHIn mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper inpEPSS 0.1%CVE-2023-52349MEDIUMIn ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2018-9391MEDIUMIn update_gps_sv and output_vzw_debug of
vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor
ker.c, there iEPSS 0.1%CVE-2018-9463HIGHIn sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible
out of bounds write due to an incorrect bounds check. This cEPSS 0.1%CVE-2024-20092HIGHIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2018-9396HIGHIn rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorreEPSS 0.1%CVE-2018-9392HIGHIn get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write dueEPSS 0.1%CVE-2025-36903HIGHIn lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privileEPSS 0.1%CVE-2018-9397HIGHIn WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB
write due to a missing bounds check. This could lead to local esEPSS 0.1%CVE-2018-9398HIGHIn fm_set_stat of mediatek FM radio driver, there is a possible OOB write
due to improper input validation. This could lead to local escEPSS 0.1%CVE-2024-56190HIGHIn wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. This could lead to loEPSS 0.1%CVE-2024-20075MEDIUMIn eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2018-9404HIGHIn oemCallback of ril.cpp, there is a possible out of bounds write due to an
integer overflow. This could lead to local escalation of prEPSS 0.1%CVE-2018-9395HIGHIn mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gEPSS 0.1%CVE-2018-9462HIGHIn store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to
an incorrect bounds check. This could lead to local escalatioEPSS 0.1%CVE-2025-32313HIGHIn UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalEPSS 0.1%CVE-2023-48355MEDIUMIn jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemEPSS 0.1%CVE-2023-48359MEDIUMIn autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service witEPSS 0.1%