Weaknesses of type CWE-119

3,264 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-6146HIGHTOTOLINK X15 HTTP POST Request formSysLog buffer overflowEPSS 1.3%CVE-2025-6291HIGHD-Link DIR-825 HTTP POST Request do_file stack-based overflowEPSS 1.3%CVE-2025-6292HIGHD-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflowEPSS 1.3%CVE-2022-30938—A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versEPSS 1.3%CVE-2024-24476HIGHA buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_loEPSS 1.3%CVE-2025-6113HIGHTenda FH1203 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2025-6112HIGHTenda FH1205 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2023-1729—A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.EPSS 1.3%CVE-2025-5619HIGHTenda CH22 addUserName formaddUserName stack-based overflowEPSS 1.3%CVE-2021-40400CRITICALAn out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1EPSS 1.3%CVE-2021-20284—A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due EPSS 1.3%CVE-2025-7910HIGHD-Link DIR-513 Boa Webserver formSetWanNonLogin sprintf stack-based overflowEPSS 1.3%CVE-2025-7909HIGHD-Link DIR-513 Boa Webserver formLanSetupRouterSettings sprintf stack-based overflowEPSS 1.3%CVE-2016-10012HIGHThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds checkEPSS 1.3%CVE-2020-1671HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.EPSS 1.3%CVE-2020-3273HIGHCisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service VulnerabilityEPSS 1.3%CVE-2020-28600HIGHAn out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crEPSS 1.3%CVE-2025-8160HIGHTenda AC20 httpd SetSysTimeCfg buffer overflowEPSS 1.3%CVE-2021-38405HIGHSiemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.3%CVE-2024-11248HIGHTenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowEPSS 1.3%