Weaknesses of type CWE-119

3,514 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-5903HIGHTOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflowEPSS 12.1%CVE-2025-5904HIGHTOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflowEPSS 12.1%CVE-2025-4544HIGHD-Link DI-8100 jhttpd ddos.asp stack-based overflowEPSS 11.8%CVE-2026-88779HIGHMemory overflow vulnerability leading to Denial of ServiceEPSS 11.4%KEVCVE-2025-8138HIGHTOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflowEPSS 11.3%CVE-2025-8140HIGHTOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflowEPSS 11.3%CVE-2017-6740HIGHThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow EPSS 11.1%KEVCVE-2017-6739HIGHA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rEPSS 10.9%KEVCVE-2017-6743HIGHThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow EPSS 10.9%KEVCVE-2017-6738HIGHThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow EPSS 10.9%KEVCVE-2017-1000253HIGHLinux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86EPSS 10.7%KEVCVE-2025-6543CRITICALMemory overflow vulnerability leading to unintended control flow and Denial of ServiceEPSS 10.4%KEVCVE-2015-2546HIGHThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows SeEPSS 10.1%KEVCVE-2025-9482HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflowEPSS 10.1%CVE-1999-1588CRITICALBuffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long sEPSS 10.1%CVE-2025-7776HIGHMemory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of ServiceEPSS 9.1%CVE-2025-0566HIGHTenda AC15 SetDevNetName formSetDevNetName stack-based overflowEPSS 9.1%CVE-2021-34859HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is EPSS 8.9%CVE-2025-4883HIGHD-Link DI-8100 Connection Limit Page ctxz.asp ctxz_asp stack-based overflowEPSS 8.9%CVE-2025-11549HIGHTenda W12 HTTP Request modules wifiMacFilterSet stack-based overflowEPSS 8.9%