Weaknesses of type CWE-119

3,264 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-5600CRITICALTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.2%CVE-2020-35521—A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denialEPSS 1.2%CVE-2023-45235HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2023-45230HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2021-33481—A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.EPSS 1.2%CVE-2021-1510HIGHCisco SD-WAN vEdge Software Buffer Overflow VulnerabilitiesEPSS 1.2%CVE-2026-1329HIGHTenda AX1803 WifiGuestSet fromGetWifiGuestBasic stack-based overflowEPSS 1.2%CVE-2020-3310MEDIUMCisco Firepower Device Manager On-Box Software XML Parsing VulnerabilityEPSS 1.2%CVE-2021-1509HIGHCisco SD-WAN vEdge Software Buffer Overflow VulnerabilitiesEPSS 1.2%CVE-2025-6128HIGHTOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflowEPSS 1.2%CVE-2023-24585HIGHAn out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted networEPSS 1.2%CVE-2024-11047HIGHD-Link DI-8003 upgrade_filter.asp upgrade_filter_asp stack-based overflowEPSS 1.2%CVE-2024-11048HIGHD-Link DI-8003 dbsrv.asp dbsrv_asp stack-based overflowEPSS 1.2%CVE-2025-5868HIGHRT-Thread lwp_syscall.c sys_thread_sigprocmask array indexEPSS 1.2%CVE-2025-31278HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS SeEPSS 1.2%CVE-2020-13497MEDIUMAn exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file EPSS 1.2%CVE-2023-45234HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2021-22713HIGHA CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION76EPSS 1.2%CVE-2025-1897HIGHTenda TX3 SetNetControlList buffer overflowEPSS 1.2%CVE-2025-4342HIGHD-Link DIR-600L formEasySetupWizard3 buffer overflowEPSS 1.2%