Weaknesses of type CWE-119

3,269 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2023-28638HIGHStack references to locations outside buffers may become invalid if they exist during a GC compaction in SnappierEPSS 0.6%CVE-2026-82631LOWvalkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after freeEPSS 0.6%CVE-2026-91086MEDIUMGPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflowEPSS 0.6%CVE-2025-2338MEDIUMtbeu matio io.c strdup_vprintf heap-based overflowEPSS 0.6%CVE-2023-26974MEDIUMIrfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.EPSS 0.6%CVE-2021-1137HIGHCisco SD-WAN vManage Software VulnerabilitiesEPSS 0.5%CVE-2026-42488HIGHx86: mismatched mapcache metadataEPSS 0.5%CVE-2021-3489HIGHLinux kernel eBPF RINGBUF map oversized allocationEPSS 0.5%CVE-2025-15555MEDIUMOpen5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflowEPSS 0.5%CVE-2026-39863HIGHKamailio Core: TCP Data Processing VulnerabilityEPSS 0.5%CVE-2026-54559MEDIUMPocketSphinx: Buffer overflows in language and acoustic model loading codeEPSS 0.5%CVE-2023-43815HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code ExecutionEPSS 0.5%CVE-2025-15008MEDIUMTenda WH450 HTTP Request L7Port stack-based overflowEPSS 0.5%CVE-2024-26149LOWVyper _abi_decode Memory OverflowEPSS 0.5%CVE-2026-82587MEDIUMOpen5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruptionEPSS 0.5%CVE-2017-16231MEDIUMIn PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-rEPSS 0.5%CVE-2022-29486MEDIUMImproper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenEPSS 0.5%CVE-2026-28904HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOSEPSS 0.5%CVE-2026-28905HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS EPSS 0.5%CVE-2026-2940MEDIUMZaher1307 tiny_web_server URL tiny.c out-of-bounds writeEPSS 0.5%