Weaknesses of type CWE-119

3,265 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2021-1511HIGHCisco SD-WAN vEdge Software Buffer Overflow VulnerabilitiesEPSS 1.0%CVE-2021-1526HIGHCisco Webex Player Memory Corruption VulnerabilityEPSS 1.0%CVE-2025-43212MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOEPSS 1.0%CVE-2025-6393HIGHTOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflowEPSS 1.0%CVE-2020-5383MEDIUMDell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability in the Likewise comEPSS 1.0%CVE-2026-75784CRITICALTRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflowEPSS 1.0%CVE-2024-27820HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOSEPSS 1.0%CVE-2006-7221HIGHMultiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving tEPSS 1.0%CVE-2023-4233HIGHOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() functionEPSS 1.0%CVE-2022-26129HIGHBuffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtEPSS 1.0%CVE-2022-26127—A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examEPSS 1.0%CVE-2025-14964CRITICALTOTOLINK T10 cstecgi.cgi sprintf stack-based overflowEPSS 1.0%CVE-2025-5978HIGHTenda FH1202 VirtualSer fromVirtualSer stack-based overflowEPSS 1.0%CVE-2025-5934HIGHNetgear EX3700 mtd sub_41619C stack-based overflowEPSS 1.0%CVE-2025-6150HIGHTOTOLINK X15 HTTP POST Request formMultiAP buffer overflowEPSS 1.0%CVE-2025-6148HIGHTOTOLINK A3002RU HTTP POST Request formSysLog buffer overflowEPSS 1.0%CVE-2025-12595HIGHTenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflowEPSS 1.0%CVE-2025-6149HIGHTOTOLINK A3002R HTTP POST Request formSysLog buffer overflowEPSS 1.0%CVE-2025-1814HIGHTenda AC6 WifiExtraSet stack-based overflowEPSS 1.0%CVE-2023-23567HIGHA heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted filEPSS 1.0%