Weaknesses of type CWE-119

3,262 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2017-6743HIGHThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow EPSS 10.9%KEVCVE-2025-7088HIGHBelkin F9K1122 webs formPPPoESetup stack-based overflowEPSS 10.9%CVE-2017-1000253HIGHLinux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86EPSS 10.7%KEVCVE-2025-7087HIGHBelkin F9K1122 webs formL2TPSetup stack-based overflowEPSS 10.5%CVE-2025-8017HIGHTenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflowEPSS 10.4%CVE-2025-6543CRITICALMemory overflow vulnerability leading to unintended control flow and Denial of ServiceEPSS 10.1%KEVCVE-2015-2546HIGHThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows SeEPSS 10.1%KEVCVE-2025-8184HIGHD-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflowEPSS 9.9%CVE-1999-1588CRITICALBuffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long sEPSS 9.9%CVE-2021-34859HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is EPSS 8.9%CVE-2025-2620CRITICALD-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflowEPSS 8.7%CVE-2025-0566HIGHTenda AC15 SetDevNetName formSetDevNetName stack-based overflowEPSS 8.7%CVE-2025-9482HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflowEPSS 8.5%CVE-2025-11549HIGHTenda W12 HTTP Request modules wifiMacFilterSet stack-based overflowEPSS 8.5%CVE-2025-8180HIGHTenda CH22 deleteUserName formdeleteUserName buffer overflowEPSS 8.5%CVE-2025-4883HIGHD-Link DI-8100 Connection Limit Page ctxz.asp ctxz_asp stack-based overflowEPSS 8.2%CVE-2012-2034HIGHAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 EPSS 7.8%KEVCVE-2025-8140HIGHTOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflowEPSS 7.8%CVE-2025-8138HIGHTOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflowEPSS 7.8%CVE-2018-0315—A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unautheEPSS 7.8%