Weaknesses of type CWE-119

3,263 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-12235HIGHTenda CH22 SetIpBind fromSetIpBind buffer overflowEPSS 4.8%CVE-2020-3470CRITICALCisco Integrated Management Controller Multiple Remote Code Execution VulnerabilitiesEPSS 4.8%CVE-2025-10953HIGHUTT 1200GW/1250GW formApMail buffer overflowEPSS 4.8%CVE-2016-9535CRITICALtif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in rEPSS 4.8%CVE-2025-6627HIGHTOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflowEPSS 4.7%CVE-2020-3258CRITICALCisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution VulnerabilitiesEPSS 4.6%CVE-2026-7856HIGHD-Link DI-8100 Web Management url_member.asp buffer overflowEPSS 4.6%CVE-2014-1692HIGHThe hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialiEPSS 4.6%CVE-2025-15255CRITICALTenda W6-S R7websSsecurityHandler httpd stack-based overflowEPSS 4.5%CVE-2021-31979HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 4.5%KEVCVE-2025-12232HIGHTenda CH22 SafeClientFilter fromSafeClientFilter buffer overflowEPSS 4.5%CVE-2026-2017CRITICALIP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflowEPSS 4.5%CVE-2015-6492HIGHAllen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of sEPSS 4.5%CVE-2020-3198CRITICALCisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution VulnerabilitiesEPSS 4.5%CVE-2019-6824—A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attaEPSS 4.5%CVE-2025-7762HIGHD-Link DI-8100 HTTP Request menu_nat_more.asp stack-based overflowEPSS 4.4%CVE-2025-12233HIGHTenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflowEPSS 4.3%CVE-2020-17003HIGHBase3D Remote Code Execution VulnerabilityEPSS 4.2%CVE-2017-7506—spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacEPSS 4.2%CVE-2025-9392HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 qosClassifier stack-based overflowEPSS 4.2%