Weaknesses of type CWE-119

3,278 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2026-16361CRITICALMemory safety bugs fixed in Thunderbird ESR 140.13EPSS 0.3%CVE-2025-1378MEDIUMradare2 rasm2 rasm2.c memory corruptionEPSS 0.3%CVE-2026-12329MEDIUMMemory safety bug fixed in Thunderbird ESR 140.12EPSS 0.3%CVE-2022-42798MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watEPSS 0.3%CVE-2026-65333MEDIUMThis issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1EPSS 0.3%CVE-2026-100745MEDIUMEdimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflowEPSS 0.3%CVE-2025-53711MEDIUMTP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflowEPSS 0.3%CVE-2025-53712MEDIUMTP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflowEPSS 0.3%CVE-2025-53714MEDIUMTP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflowEPSS 0.3%CVE-2025-53713MEDIUMTP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflowEPSS 0.3%CVE-2022-2964—A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contaiEPSS 0.3%CVE-2025-53715MEDIUMTP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflowEPSS 0.3%CVE-2026-20644MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOSEPSS 0.3%CVE-2025-1786MEDIUMrizinorg rizin pdb.c msf_stream_directory_free buffer overflowEPSS 0.3%CVE-2012-0952MEDIUMHeap overflow in control device ioctlEPSS 0.3%CVE-2026-16364CRITICALIncorrect boundary conditions in the Audio/Video: Playback componentEPSS 0.3%CVE-2026-20635MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOSEPSS 0.3%CVE-2025-1788MEDIUMrizinorg rizin utf8.c rz_utf8_encode heap-based overflowEPSS 0.3%CVE-2024-0771MEDIUMNsasoft Product Key Explorer Registration memory corruptionEPSS 0.3%CVE-2025-4092MEDIUMMemory safety bugs fixed in Firefox 138 and Thunderbird 138EPSS 0.3%