Weaknesses of type CWE-119

3,264 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-9525HIGHLinksys E1700 setWan stack-based overflowEPSS 1.4%CVE-2025-9526HIGHLinksys E1700 setSysAdm stack-based overflowEPSS 1.4%CVE-2025-4146HIGHNetgear EX6200 sub_41940 buffer overflowEPSS 1.4%CVE-2019-15284HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.4%CVE-2019-15286HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.4%CVE-2025-43429MEDIUMA buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 anEPSS 1.4%CVE-1999-0069HIGHSolaris ufsrestore buffer overflow.EPSS 1.4%CVE-2017-6720—A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote aEPSS 1.4%CVE-2024-22391HIGHA heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A spEPSS 1.4%CVE-2025-9481HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflowEPSS 1.4%CVE-2021-34781HIGHCisco Firepower Threat Defense Software SSH Connections Denial of Service VulnerabilityEPSS 1.4%CVE-2021-1402HIGHCisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service VulnerabilityEPSS 1.4%CVE-2021-1279HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-1241HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-1273HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2024-45169CRITICALAn issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and iEPSS 1.4%CVE-2026-7069HIGHD-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflowEPSS 1.4%CVE-2025-5912HIGHD-Link DIR-632 HTTP POST Request do_file stack-based overflowEPSS 1.4%CVE-2021-3826—Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of servicEPSS 1.4%CVE-2025-5909HIGHTOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflowEPSS 1.4%