Weaknesses of type CWE-119

3,278 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-4892MEDIUMcode-projects Police Station Management System Delete Record source.cpp remove stack-based overflowEPSS 0.4%CVE-2025-4029MEDIUMcode-projects Personal Diary Management System New Record addrecord stack-based overflowEPSS 0.4%CVE-2025-43504MEDIUMA buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position maEPSS 0.3%CVE-2025-4063MEDIUMcode-projects Student Information Management System cancel stack-based overflowEPSS 0.3%CVE-2023-3576MEDIUMLibtiff: memory leak in tiffcrop.cEPSS 0.3%CVE-2025-4061MEDIUMcode-projects Clothing Store Management System add_item stack-based overflowEPSS 0.3%CVE-2025-1587MEDIUMSourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflowEPSS 0.3%CVE-2025-4062MEDIUMcode-projects Theater Seat Booking System cancel stack-based overflowEPSS 0.3%CVE-2024-2929HIGHRockwell Automation Arena Simulation Vulnerable To Memory CorruptionEPSS 0.3%CVE-2023-23457MEDIUMUpx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cppEPSS 0.3%CVE-2024-7024CRITICALInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escapeEPSS 0.3%CVE-2025-1372MEDIUMGNU elfutils eu-readelf readelf.c print_string_section buffer overflowEPSS 0.3%CVE-2025-4891MEDIUMcode-projects Police Station Management System Display Record source.cpp display buffer overflowEPSS 0.3%CVE-2025-4499MEDIUMcode-projects Simple Hospital Management System Add Information add stack-based overflowEPSS 0.3%CVE-2025-4889MEDIUMcode-projects Tourism Management System User Registration AddUser buffer overflowEPSS 0.3%CVE-2025-4498MEDIUMcode-projects Simple Bus Reservation System Install Bus install stack-based overflowEPSS 0.3%CVE-2025-4500MEDIUMcode-projects Hotel Management System Edit Room edit stack-based overflowEPSS 0.3%CVE-2024-11575HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2019-1630MEDIUMCisco Integrated Management Controller Denial of Service VulnerabilityEPSS 0.3%CVE-2025-4888MEDIUMcode-projects Pharmacy Management System Add Order Details take_order buffer overflowEPSS 0.3%