Weaknesses of type CWE-119

3,263 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2020-15158HIGHHeap buffer overflow in libIEC61850EPSS 2.0%CVE-2025-2618CRITICALD-Link DAP-1620 Path api set_ws_action heap-based overflowEPSS 2.0%CVE-2025-2619CRITICALD-Link DAP-1620 Cookie storage check_dws_cookie stack-based overflowEPSS 2.0%CVE-2025-4255MEDIUMPCMan FTP Server RMD Command buffer overflowEPSS 2.0%CVE-2020-3283HIGHCisco Firepower 1000 Series SSL/TLS Denial of Service VulnerabilityEPSS 2.0%CVE-2026-3910HIGHInappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandEPSS 2.0%KEVCVE-2021-22709—A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA SystemEPSS 2.0%CVE-2021-22710—A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA SystemEPSS 2.0%CVE-2021-46598HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. UEPSS 2.0%CVE-2018-0346—A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to causeEPSS 2.0%CVE-2020-13571CRITICALAn out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8. A specially crafted malfoEPSS 2.0%CVE-2020-3194HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilityEPSS 2.0%CVE-2021-20276—A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of servEPSS 2.0%CVE-2021-20275—A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service.EPSS 2.0%CVE-2019-13942—A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versiEPSS 1.9%CVE-2021-3404—In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) dEPSS 1.9%CVE-2021-1479HIGHCisco SD-WAN vManage Software VulnerabilitiesEPSS 1.9%CVE-2021-43083—Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server responseEPSS 1.9%CVE-2021-34306—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll libEPSS 1.9%CVE-2021-34934HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 1.9%