Weaknesses of type CWE-119

3,513 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-11120HIGHTenda AC8 SetServerConfig formSetServerConfig buffer overflowEPSS 4.0%CVE-2019-11929—Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading EPSS 4.0%CVE-2025-15356HIGHTenda AC20 PowerSaveSet sscanf buffer overflowEPSS 4.0%CVE-2026-2961HIGHD-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflowEPSS 4.0%CVE-2018-10873HIGHA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bouEPSS 3.9%CVE-2022-26763HIGHAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, SecurEPSS 3.9%CVE-2022-32839CRITICALThe issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-EPSS 3.9%CVE-2020-3375CRITICALCisco SD-WAN Solution Software Buffer Overflow VulnerabilityEPSS 3.9%CVE-2026-0841HIGHUTT 进取 520W formPictureUrl strcpy buffer overflowEPSS 3.9%CVE-2026-0838HIGHUTT 进取 520W ConfigWirelessBase strcpy buffer overflowEPSS 3.9%CVE-2026-0837HIGHUTT 进取 520W formFireWall strcpy buffer overflowEPSS 3.9%CVE-2025-13305HIGHD-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflowEPSS 3.9%CVE-2026-4567CRITICALTenda A15 UploadCfg stack-based overflowEPSS 3.8%CVE-2026-1420HIGHTenda AC23 WifiExtraSet buffer overflowEPSS 3.8%CVE-2026-11498HIGHTenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflowEPSS 3.8%CVE-2022-3964MEDIUMffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-boundsEPSS 3.8%CVE-2017-1000101MEDIUMcurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence ofEPSS 3.7%CVE-2026-3168HIGHTenda F453 httpd NatStaticSetting fromNatStaticSetting buffer overflowEPSS 3.7%CVE-2026-3399HIGHTenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 3.7%CVE-2020-17426HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 3.7%