Weaknesses of type CWE-119

3,288 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-7318HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-25585HIGHiccDEV vulnerable to OOB in CIccXform3DLut::Apply()EPSS 0.2%CVE-2026-8261MEDIUMSquirrel sqobject.cpp Load heap-based overflowEPSS 0.2%CVE-2024-27791MEDIUMThe issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey EPSS 0.2%CVE-2018-25109MEDIUMNintendo Animal Crossing Letter Trigram ac-exploit-gc memory corruptionEPSS 0.2%CVE-2025-15570MEDIUMckolivas lrzip stream.c lzma_decompress_buf use after freeEPSS 0.2%CVE-2025-7320HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7323HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-65396MEDIUMA vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hiEPSS 0.2%CVE-2024-9489HIGHAutodesk AutoCAD DWG File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2026-90801MEDIUMGNU Binutils ld cache.c cache_bwrite buffer overflowEPSS 0.2%CVE-2024-8599HIGHAutodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2025-15412MEDIUMWebAssembly wabt wasm-decompile VarName out-of-boundsEPSS 0.2%CVE-2024-8598HIGHAutodesk AutoCAD ACTranslators STEP File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2025-15411MEDIUMWebAssembly wabt wasm-decompile InsertNode memory corruptionEPSS 0.2%CVE-2024-8597HIGHAutodesk AutoCAD STEP File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2024-8600HIGHA maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A maliEPSS 0.2%CVE-2022-34412HIGH Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious userEPSS 0.2%CVE-2026-2660MEDIUMFascinatedBox lily lily_symtab.c shorthash_for_name use after freeEPSS 0.2%CVE-2026-3145MEDIUMlibvips matrixload.c vips_foreign_load_matrix_header memory corruptionEPSS 0.2%