Weaknesses of type CWE-119

3,276 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2024-11553HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-16357CRITICALIncorrect boundary conditions in the Graphics componentEPSS 0.4%CVE-2026-16350CRITICALIncorrect boundary conditions in the Audio/Video: cubeb componentEPSS 0.4%CVE-2025-8034HIGHMemory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141EPSS 0.4%CVE-2021-1521MEDIUMCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Denial of Service VulnerabilityEPSS 0.4%CVE-2025-33077HIGHIBM Engineering Systems Design Rhapsody code executionEPSS 0.4%CVE-2020-8896MEDIUMBuffer Overflow in Google Earth ProEPSS 0.4%CVE-2025-2851HIGHGL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflowEPSS 0.4%CVE-2026-20352HIGHCisco Identity Services Engine RADIUS Denial of Service VulnerabilityEPSS 0.4%CVE-2021-0242MEDIUMJunos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configuredEPSS 0.4%CVE-2025-2308MEDIUMHDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflowEPSS 0.4%CVE-2025-43264HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image mayEPSS 0.4%CVE-2023-38084HIGHKofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-38082HIGHKofax Power PDF GIF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-23129HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.4%CVE-2024-11522HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11538HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-21483CRITICALImproper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & ConnectivityEPSS 0.4%CVE-2024-52923HIGHAn issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 128EPSS 0.4%CVE-2026-10064MEDIUMTRENDnet TEW-432BRP formSetPortTr stack-based overflowEPSS 0.4%