Weaknesses of type CWE-119

3,268 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2026-2908HIGHTenda HG9 Loopback Detection Configuration Endpoint formLoopBack stack-based overflowEPSS 1.0%CVE-2026-2906HIGHTenda HG9 Samba Configuration Endpoint formSamba stack-based overflowEPSS 1.0%CVE-2026-2905HIGHTenda HG9 Wireless Configuration Endpoint formWlanSetup stack-based overflowEPSS 1.0%CVE-2021-1503HIGHCisco Webex Network Recording Player and Webex Player Memory Corruption VulnerabilityEPSS 1.0%CVE-2021-1511HIGHCisco SD-WAN vEdge Software Buffer Overflow VulnerabilitiesEPSS 1.0%CVE-2025-5855HIGHTenda AC6 SetRebootTimer formSetRebootTimer stack-based overflowEPSS 1.0%CVE-2021-1526HIGHCisco Webex Player Memory Corruption VulnerabilityEPSS 1.0%CVE-2025-43212MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOEPSS 1.0%CVE-2025-6393HIGHTOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflowEPSS 1.0%CVE-2020-5383MEDIUMDell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability in the Likewise comEPSS 1.0%CVE-2026-7055HIGHTenda F456 httpd VirtualSer fromVirtualSer buffer overflowEPSS 1.0%CVE-2026-77946CRITICALTRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflowEPSS 1.0%CVE-2026-7546CRITICALTotolink NR1800X lighttpd find_host_ip stack-based overflowEPSS 1.0%CVE-2026-7719CRITICALTotolink WA300 POST Request cstecgi.cgi loginauth buffer overflowEPSS 1.0%CVE-2026-76008CRITICALComfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflowEPSS 1.0%CVE-2026-7747CRITICALTotolink N300RH Parameter cstecgi.cgi loginauth buffer overflowEPSS 1.0%CVE-2024-27820HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOSEPSS 1.0%CVE-2023-4233HIGHOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() functionEPSS 1.0%CVE-2006-7221HIGHMultiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving tEPSS 1.0%CVE-2025-4120HIGHNetgear JWNR2000v2 sub_4238E8 buffer overflowEPSS 1.0%