Weaknesses of type CWE-119

3,513 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-4255MEDIUMPCMan FTP Server RMD Command buffer overflowEPSS 2.2%CVE-2021-1300CRITICALCisco SD-WAN Buffer Overflow VulnerabilitiesEPSS 2.2%CVE-2026-7248CRITICALD-Link DI-8100 CGI Endpoint tgfile.htm tgfile_htm buffer overflowEPSS 2.2%CVE-2021-1479HIGHCisco SD-WAN vManage Software VulnerabilitiesEPSS 2.1%CVE-2022-32934HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A rEPSS 2.1%CVE-2017-6633—A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote attacker EPSS 2.1%CVE-2025-2621CRITICALD-Link DAP-1620 storage check_dws_cookie stack-based overflowEPSS 2.1%CVE-2021-1301CRITICALCisco SD-WAN Buffer Overflow VulnerabilitiesEPSS 2.1%CVE-2020-13520HIGHAn out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A speciallyEPSS 2.1%CVE-2021-20204CRITICALA heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databasEPSS 2.1%CVE-2019-11925—Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via EPSS 2.1%CVE-2022-29465HIGHAn out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A speciEPSS 2.1%CVE-2025-2619CRITICALD-Link DAP-1620 Cookie storage check_dws_cookie stack-based overflowEPSS 2.1%CVE-2025-2618CRITICALD-Link DAP-1620 Path api set_ws_action heap-based overflowEPSS 2.1%CVE-2025-4462HIGHTOTOLINK N150RT formWsc buffer overflowEPSS 2.1%CVE-2020-13571CRITICALAn out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8. A specially crafted malfoEPSS 2.0%CVE-2017-9639—An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka impEPSS 2.0%CVE-2020-15158HIGHHeap buffer overflow in libIEC61850EPSS 2.0%CVE-2022-3550MEDIUMX.org Server xkb.c _GetCountedString buffer overflowEPSS 2.0%CVE-2025-7911HIGHD-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflowEPSS 2.0%