Weaknesses of type CWE-119

3,273 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2026-19967MEDIUMOpen Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflowEPSS 0.5%CVE-2025-9187CRITICALMemory safety bugs fixed in Firefox 142 and Thunderbird 142EPSS 0.4%CVE-2026-8974HIGHMemory safety bugs fixed in Firefox ESR 140.11 and Firefox 151EPSS 0.4%CVE-2026-8959CRITICALSandbox escape due to incorrect boundary conditions in the Widget: Win32 componentEPSS 0.4%CVE-2019-25078MEDIUMpacparser pacparser.c pacparser_find_proxy buffer overflowEPSS 0.4%CVE-2018-1068—A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrEPSS 0.4%CVE-2026-10121HIGHTRENDnet TEW-432BRP formSetUrlFilter stack-based overflowEPSS 0.4%CVE-2026-10125HIGHEdimax BR-6478AC POST Request formPPPoESetup stack-based overflowEPSS 0.4%CVE-2024-23257LOWThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS SonEPSS 0.4%CVE-2024-9403HIGHMemory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.4%CVE-2024-21980HIGHImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMCEPSS 0.4%CVE-2024-20011CRITICALIn alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with EPSS 0.4%CVE-2025-15247MEDIUMgmg137 snap7-rs client.rs download heap-based overflowEPSS 0.4%CVE-2023-42043HIGHPDF-XChange Editor PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-31194MEDIUMAn improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted markEPSS 0.4%CVE-2025-26597HIGHXorg: xwayland: buffer overflow in xkbchangetypesofkey()EPSS 0.4%CVE-2025-60016HIGHBIG-IP SSL/TLS vulnerabilityEPSS 0.4%CVE-2025-2521HIGHLack of indexes’ validation against buffer borders leads to remote code execution.EPSS 0.4%CVE-2025-8044CRITICALMemory safety bugs fixed in Firefox 141 and Thunderbird 141EPSS 0.4%CVE-2026-39870HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. PEPSS 0.4%