Weaknesses of type CWE-119

3,513 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2024-11237HIGHTP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflowEPSS 5.3%CVE-2025-12235HIGHTenda CH22 SetIpBind fromSetIpBind buffer overflowEPSS 5.2%CVE-2019-17135HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interacEPSS 5.2%CVE-2020-15782CRITICALA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP EPSS 5.2%CVE-2022-3435MEDIUMLinux Kernel IPv4 fib_semantics.c fib_nh_match out-of-boundsEPSS 5.2%CVE-2022-3559MEDIUMExim Regex use after freeEPSS 5.0%CVE-2025-9363HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portTriggerManageRule stack-based overflowEPSS 5.0%CVE-2024-12343HIGHTP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflowEPSS 5.0%CVE-2025-6151HIGHTP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflowEPSS 5.0%CVE-2025-12232HIGHTenda CH22 SafeClientFilter fromSafeClientFilter buffer overflowEPSS 4.9%CVE-2019-1651CRITICALCisco SD-WAN Solution Buffer Overflow VulnerabilityEPSS 4.9%CVE-2017-9048HIGHlibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supEPSS 4.8%CVE-2026-2017CRITICALIP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflowEPSS 4.8%CVE-2020-3470CRITICALCisco Integrated Management Controller Multiple Remote Code Execution VulnerabilitiesEPSS 4.8%CVE-2020-3258CRITICALCisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution VulnerabilitiesEPSS 4.8%CVE-2016-9535CRITICALtif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in rEPSS 4.7%CVE-2025-12233HIGHTenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflowEPSS 4.7%CVE-2014-1692HIGHThe hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialiEPSS 4.7%CVE-2025-15255CRITICALTenda W6-S R7websSsecurityHandler httpd stack-based overflowEPSS 4.7%CVE-2026-7856HIGHD-Link DI-8100 Web Management url_member.asp buffer overflowEPSS 4.6%