Weaknesses of type CWE-119

3,288 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2022-47977HIGHA vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected applicationEPSS 0.2%CVE-2026-25582HIGHiccDEV vulnerable to Heap Buffer Overflow in CIccIO::WriteUInt16Float()EPSS 0.2%CVE-2023-27403HIGHA vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory cEPSS 0.2%CVE-2022-46396MEDIUMAn issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a EPSS 0.2%CVE-2026-14789MEDIUMradareorg radare2 Memory64ListStream mdmp.c stack-based overflowEPSS 0.2%CVE-2026-2869MEDIUMjanet-lang janet handleattr specials.c janetc_varset out-of-boundsEPSS 0.2%CVE-2026-14759MEDIUMradareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflowEPSS 0.2%CVE-2026-8084MEDIUMOSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-boundsEPSS 0.2%CVE-2025-7321HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2023-42881HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing a file may lead to unexpected apEPSS 0.2%CVE-2025-5641LOWRadare2 radiff2 cons.c r_cons_is_breaked memory corruptionEPSS 0.2%CVE-2025-5645LOWRadare2 radiff2 pal.c r_cons_pal_init memory corruptionEPSS 0.2%CVE-2025-5646LOWRadare2 radiff2 pal.c r_cons_rainbow_free memory corruptionEPSS 0.2%CVE-2025-11413MEDIUMGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-boundsEPSS 0.2%CVE-2025-7272HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7282HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7278HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7254HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7308HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7286HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%