Weaknesses of type CWE-119

3,263 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2020-3573HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 2.8%CVE-2018-10490—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interactiEPSS 2.7%CVE-2026-2910HIGHTenda HG9 formPing6 stack-based overflowEPSS 2.7%CVE-2020-15254HIGHUndefined Behavior in bounded Crossbeam channelEPSS 2.7%CVE-2020-26243HIGHMemory leak in nanopbEPSS 2.7%CVE-2020-3603HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 2.6%CVE-2020-1574MEDIUMMicrosoft Windows Codecs Library Remote Code Execution VulnerabilityEPSS 2.6%CVE-2020-3604HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 2.6%CVE-2026-4906HIGHTenda AC5 POST Request WizardHandle decodePwd stack-based overflowEPSS 2.6%CVE-2021-21898HIGHA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specEPSS 2.6%CVE-2017-2668MEDIUM389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled.EPSS 2.6%CVE-2020-3268HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface VulnerabilitiesEPSS 2.6%CVE-2020-3269HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface VulnerabilitiesEPSS 2.6%CVE-2017-12280—A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco WirelessEPSS 2.6%CVE-2025-5630CRITICALD-Link DIR-816 form2lansetup.cgi stack-based overflowEPSS 2.6%CVE-2025-4441HIGHD-Link DIR-605L formSetWAN_Wizard534 buffer overflowEPSS 2.6%CVE-2025-4442HIGHD-Link DIR-605L formSetWAN_Wizard55 buffer overflowEPSS 2.6%CVE-2026-3808HIGHTenda FH1202 webtypelibrary formWebTypeLibrary stack-based overflowEPSS 2.6%CVE-2020-12038—Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6EPSS 2.5%CVE-2025-5624CRITICALD-Link DIR-816 QoSPortSetup stack-based overflowEPSS 2.5%