Weaknesses of type CWE-119

3,273 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2023-23517HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS EPSS 0.9%CVE-2022-26772HIGHA memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be abEPSS 0.9%CVE-2025-3161HIGHTenda AC10 ShutdownSetAdd stack-based overflowEPSS 0.9%CVE-2026-7737MEDIUMosrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-boundsEPSS 0.9%CVE-2025-13191HIGHD-Link DIR-816L soap.cgi soapcgi_main stack-based overflowEPSS 0.9%CVE-2025-8939HIGHTenda AC20 WifiGuestSet buffer overflowEPSS 0.9%CVE-2025-13189HIGHD-Link DIR-816L gena.cgi genacgi_main stack-based overflowEPSS 0.9%CVE-2023-1972MEDIUMA potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.EPSS 0.9%CVE-2025-43441MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOSEPSS 0.9%CVE-2025-6940HIGHTOTOLINK A702R HTTP POST Request formParentControl buffer overflowEPSS 0.9%CVE-2025-15428HIGHUTT 进取 512W formRemoteControl strcpy buffer overflowEPSS 0.9%CVE-2025-6886HIGHTenda AC5 openSchedWifi stack-based overflowEPSS 0.9%CVE-2025-6953HIGHTOTOLINK A3002RU HTTP POST Request formParentControl buffer overflowEPSS 0.9%CVE-2025-15429HIGHUTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflowEPSS 0.9%CVE-2025-15461HIGHUTT 进取 520W formTaskEdit strcpy buffer overflowEPSS 0.9%CVE-2025-6939HIGHTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%CVE-2018-17907—When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can fEPSS 0.9%CVE-2020-36619MEDIUMmultimon-ng demod_flex.c add_ch format stringEPSS 0.9%CVE-2026-2067HIGHUTT 进取 520W formTimeGroupConfig strcpy buffer overflowEPSS 0.9%CVE-2023-29420MEDIUMAn issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.EPSS 0.9%