Weaknesses of type CWE-119

3,264 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2019-13522—An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor VersEPSS 1.4%CVE-2024-20082CRITICALIn Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional eEPSS 1.4%CVE-2025-1153LOWGNU Binutils format.c bfd_set_format memory corruptionEPSS 1.4%CVE-2021-27397—A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validEPSS 1.4%CVE-2025-5215HIGHD-Link DCS-5020L ptdc.cgi websReadEvent stack-based overflowEPSS 1.4%CVE-2026-86296CRITICALD-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflowEPSS 1.3%CVE-2022-3564MEDIUMLinux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after freeEPSS 1.3%CVE-2020-25690—An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens.EPSS 1.3%CVE-2026-20700HIGHA memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tEPSS 1.3%KEVCVE-2025-3988HIGHTOTOLINK N150RT formPortFw buffer overflowEPSS 1.3%CVE-2025-7084HIGHBelkin F9K1122 webs formWpsStart stack-based overflowEPSS 1.3%CVE-2022-3705MEDIUMvim autocmd quickfix.c qf_update_buffer use after freeEPSS 1.3%CVE-2020-11046MEDIUMImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPEPSS 1.3%CVE-2025-4809HIGHTenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflowEPSS 1.3%CVE-2024-11745HIGHTenda AC8 SetStaticRouteCfg route_static_check stack-based overflowEPSS 1.3%CVE-2021-0227HIGHJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packetsEPSS 1.3%CVE-2021-46157—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.3%CVE-2025-5969HIGHD-Link DIR-632 HTTP POST Request biurl_grou FUN_00425fd8 stack-based overflowEPSS 1.3%CVE-2023-35002CRITICALA heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed fEPSS 1.3%CVE-2025-11294HIGHBelkin F9K1015 formL2TPSetup buffer overflowEPSS 1.3%