Falhas do tipo CWE-787
5.237 resultadosEscrita fora dos limites de memória
Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.
Exemplo
Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.
Como mitigar
Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).
CVE-2025-20783MEDIUMIn display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malEPSS 0.1%CVE-2018-9376HIGHIn rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorreEPSS 0.1%CVE-2023-48358MEDIUMIn drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemEPSS 0.1%CVE-2023-48357MEDIUMIn vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemEPSS 0.1%CVE-2023-48355MEDIUMIn jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemEPSS 0.1%CVE-2025-20777MEDIUMIn display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malEPSS 0.1%CVE-2023-48356MEDIUMIn jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemEPSS 0.1%CVE-2024-20125MEDIUMIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a maliciEPSS 0.1%CVE-2023-52347MEDIUMIn ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2023-48359MEDIUMIn autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service witEPSS 0.1%CVE-2023-48351MEDIUMIn video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no EPSS 0.1%CVE-2025-47320HIGHOut-of-bounds Write in AudioEPSS 0.1%CVE-2024-53836MEDIUMIn wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local eEPSS 0.1%CVE-2024-20108MEDIUMIn atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemEPSS 0.1%CVE-2024-20110MEDIUMIn ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2026-0117HIGHIn mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalEPSS 0.1%CVE-2023-48348MEDIUMIn video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with EPSS 0.1%CVE-2024-20098MEDIUMIn power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysteEPSS 0.1%CVE-2024-20121MEDIUMIn KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with EPSS 0.1%CVE-2024-20099MEDIUMIn power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysteEPSS 0.1%