Weaknesses of type CWE-119

3,263 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2026-0837HIGHUTT 进取 520W formFireWall strcpy buffer overflowEPSS 3.9%CVE-2026-0841HIGHUTT 进取 520W formPictureUrl strcpy buffer overflowEPSS 3.9%CVE-2026-0838HIGHUTT 进取 520W ConfigWirelessBase strcpy buffer overflowEPSS 3.9%CVE-2022-32839CRITICALThe issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-EPSS 3.8%CVE-2025-10385HIGHMercury KM08-708H GiGA WiFi Wave2 mcr_setSysAdm sub_450B2C buffer overflowEPSS 3.8%CVE-2026-11498HIGHTenda HG7HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflowEPSS 3.8%CVE-2022-3964MEDIUMffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-boundsEPSS 3.8%CVE-2025-11120HIGHTenda AC8 SetServerConfig formSetServerConfig buffer overflowEPSS 3.7%CVE-2026-4567CRITICALTenda A15 UploadCfg stack-based overflowEPSS 3.7%CVE-2022-26763HIGHAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, SecurEPSS 3.7%CVE-2026-1420HIGHTenda AC23 WifiExtraSet buffer overflowEPSS 3.7%CVE-2025-13305HIGHD-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflowEPSS 3.6%CVE-2026-2961HIGHD-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflowEPSS 3.5%CVE-2020-17426HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 3.5%CVE-2026-2962HIGHD-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub_460F30 stack-based overflowEPSS 3.5%CVE-2022-32847CRITICALThis issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6EPSS 3.5%CVE-2025-6436HIGHMemory safety bugs fixed in Firefox 140 and Thunderbird 140EPSS 3.5%CVE-2021-3657—A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or comprEPSS 3.5%CVE-2025-1876MEDIUMD-Link DAP-1562 HTTP Header http_request_parse stack-based overflowEPSS 3.5%CVE-2018-0175HIGHFormat String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOEPSS 3.5%KEV