Weaknesses of type CWE-119

3,264 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-4842HIGHD-Link DCS-932L ucp isUCPCameraNameChanged stack-based overflowEPSS 1.3%CVE-2025-4843HIGHD-Link DCS-932L udev SubUPnPCSInit stack-based overflowEPSS 1.3%CVE-2025-4841HIGHD-Link DCS-932L gpio sub_404780 stack-based overflowEPSS 1.3%CVE-2023-2794HIGHOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() functionEPSS 1.3%CVE-2025-7908HIGHD-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflowEPSS 1.3%CVE-2020-35527—In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.EPSS 1.2%CVE-2025-11326HIGHTenda AC18 WifiMacFilterSet stack-based overflowEPSS 1.2%CVE-2021-30499—A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and other potential consEPSS 1.2%CVE-2025-11327HIGHTenda AC18 SetUpnpCfg stack-based overflowEPSS 1.2%CVE-2025-9360HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflowEPSS 1.2%CVE-2022-30937—A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versEPSS 1.2%CVE-2020-15207HIGHSegfault and data corruption in tensorflow-liteEPSS 1.2%CVE-2024-36129HIGHOpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPCEPSS 1.2%CVE-2022-29503HIGHA memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocaEPSS 1.2%CVE-2024-11061HIGHTenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflowEPSS 1.2%CVE-2025-6368HIGHD-Link DIR-619L formSetEmail stack-based overflowEPSS 1.2%CVE-2025-6370HIGHD-Link DIR-619L formWlanGuestSetup stack-based overflowEPSS 1.2%CVE-2025-5798HIGHTenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflowEPSS 1.2%CVE-2025-5799HIGHTenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflowEPSS 1.2%CVE-2021-33479—A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c.EPSS 1.2%