Weaknesses of type CWE-119

3,283 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2022-3974MEDIUMAxiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflowEPSS 0.8%CVE-2025-8958HIGHTenda TX3 fast_setting_wifi_set stack-based overflowEPSS 0.8%CVE-2023-43822HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code ExecutionEPSS 0.8%CVE-2025-5330MEDIUMFreeFloat FTP Server RETR Command buffer overflowEPSS 0.8%CVE-2021-30472—A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possibleEPSS 0.8%CVE-2026-2202HIGHTenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflowEPSS 0.8%CVE-2026-1686HIGHTotolink A3600R app.so setAppEasyWizardConfig buffer overflowEPSS 0.8%CVE-2026-2203HIGHTenda AC8 Embedded Httpd Service fast_setting_wifi_set buffer overflowEPSS 0.8%CVE-2026-5244MEDIUMCesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflowEPSS 0.8%CVE-2020-15213MEDIUMDenial of service in tensorflow-liteEPSS 0.8%CVE-2025-9443HIGHTenda CH22 editUserName formeditUserName buffer overflowEPSS 0.8%CVE-2025-14526HIGHTenda CH22 L7Im frmL7ImForm buffer overflowEPSS 0.8%CVE-2023-42906HIGHMultiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliEPSS 0.8%CVE-2025-6882HIGHD-Link DIR-513 formSetWanPPTP buffer overflowEPSS 0.8%CVE-2026-86318MEDIUMjava-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflowEPSS 0.8%CVE-2026-39892MEDIUMcryptography has a buffer overflow if non-contiguous buffers were passed to APIsEPSS 0.8%CVE-2025-43213MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOEPSS 0.8%CVE-2025-13551HIGHD-Link DIR-822K/DWR-M920 formWanConfigSetup buffer overflowEPSS 0.8%CVE-2026-1140HIGHUTT 进取 520W ConfigExceptAli strcpy buffer overflowEPSS 0.8%CVE-2025-13552HIGHD-Link DIR-822K/DWR-M920 formWlEncrypt buffer overflowEPSS 0.8%