Weaknesses of type CWE-119

3,513 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2022-32847CRITICALThis issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6EPSS 3.2%CVE-2026-10179HIGHTRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflowEPSS 3.2%CVE-2025-24132MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An atEPSS 3.2%CVE-2020-3290HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3289HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3292HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3287HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3293HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3295HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3286HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3296HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3294HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3288HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2020-3291HIGHCisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution VulnerabilitiesEPSS 3.2%CVE-2021-40393CRITICALAn out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5EPSS 3.1%CVE-2021-1459CRITICALCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution VulnerabilityEPSS 3.1%CVE-2025-5228HIGHD-Link DI-8100 jhttpd login.cgi httpd_get_parm stack-based overflowEPSS 3.1%CVE-2025-4449HIGHD-Link DIR-619L formEasySetupWizard3 buffer overflowEPSS 3.1%CVE-2025-4452HIGHD-Link DIR-619L formSetWizard2 buffer overflowEPSS 3.1%CVE-2025-4448HIGHD-Link DIR-619L formEasySetupWizard buffer overflowEPSS 3.1%