Weaknesses of type CWE-119

3,277 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-7418HIGHTenda O3V2 httpd setPing fromPingResultGet stack-based overflowEPSS 0.8%CVE-2025-7422HIGHTenda O3V2 httpd setNetworkService setAutoReboot stack-based overflowEPSS 0.8%CVE-2024-27879HIGHThe issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may EPSS 0.8%CVE-2021-43316—A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().EPSS 0.8%CVE-2021-43317—A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). ThEPSS 0.8%CVE-2021-43315—A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). ThEPSS 0.8%CVE-2021-43314—A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). ThEPSS 0.8%CVE-2021-43312—A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggEPSS 0.8%CVE-2021-43313—A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggEPSS 0.8%CVE-2021-43311—A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). TheEPSS 0.8%CVE-2025-7528HIGHTenda FH1202 GstDhcpSetSer fromGstDhcpSetSer stack-based overflowEPSS 0.8%CVE-2023-0637MEDIUMTRENDnet TEW-811DRU Web Management Interface wan.asp memory corruptionEPSS 0.8%CVE-2025-7527HIGHTenda FH1202 AdvSetWan fromAdvSetWan stack-based overflowEPSS 0.8%CVE-2025-7530HIGHTenda FH1202 PPTPDClient fromPptpUserAdd stack-based overflowEPSS 0.8%CVE-2025-7529HIGHTenda FH1202 Natlimit fromNatlimit stack-based overflowEPSS 0.8%CVE-2025-7468HIGHTenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflowEPSS 0.8%CVE-2025-8019HIGHShenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflowEPSS 0.8%CVE-2025-8060HIGHTenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflowEPSS 0.8%CVE-2025-7465HIGHTenda FH1201 HTTP POST Request fromRouteStatic buffer overflowEPSS 0.8%CVE-2022-24661—A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vEPSS 0.8%