Weaknesses of type CWE-119

3,282 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2020-27802—An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.EPSS 0.3%CVE-2026-18291HIGHOriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-18292HIGHOriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-18294HIGHOriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-43424MEDIUMThe issue was addressed with improved bounds checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. A malicious HID deviEPSS 0.3%CVE-2024-8815HIGHPDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-3548MEDIUMOpen Asset Import Library Assimp File types.h Set heap-based overflowEPSS 0.3%CVE-2021-1111MEDIUMBootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds checkEPSS 0.3%CVE-2025-3549MEDIUMOpen Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflowEPSS 0.3%CVE-2023-45221MEDIUMImproper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilegEPSS 0.3%CVE-2025-10997MEDIUMOpen Babel chemkinformat.cpp CheckSpecies heap-based overflowEPSS 0.3%CVE-2025-10996MEDIUMOpen Babel smilesformat.cpp ParseSmiles heap-based overflowEPSS 0.3%CVE-2022-47935HIGHA vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versionsEPSS 0.3%CVE-2025-5245MEDIUMGNU Binutils objdump debug.c debug_type_samep memory corruptionEPSS 0.3%CVE-2022-47967HIGHA vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability thaEPSS 0.3%CVE-2025-3160MEDIUMOpen Asset Import Library Assimp File SceneCombiner.cpp AddNodeHashes out-of-boundsEPSS 0.3%CVE-2025-11840MEDIUMGNU Binutils ldmisc.c vfinfo out-of-boundsEPSS 0.3%CVE-2024-11611HIGHAutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-8962MEDIUMcode-projects Hostel Management System Login Form hostel_manage.exe stack-based overflowEPSS 0.3%CVE-2024-11610HIGHAutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%