Weaknesses of type CWE-119

3,283 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-4790MEDIUMFreeFloat FTP Server GLOB Command buffer overflowEPSS 0.7%CVE-2025-4791MEDIUMFreeFloat FTP Server HASH Command buffer overflowEPSS 0.7%CVE-2025-4788MEDIUMFreeFloat FTP Server DELETE Command buffer overflowEPSS 0.7%CVE-2026-15545HIGHShibby Tomato apcupsd tomatodata.cgi main out-of-bounds writeEPSS 0.7%CVE-2026-16095HIGHShibby Tomato rc setup_conntrack out-of-bounds writeEPSS 0.7%CVE-2025-13549HIGHD-Link DIR-822K formNtp sub_455524 buffer overflowEPSS 0.7%CVE-2025-10392CRITICALMercury KM08-708H GiGA WiFi Wave2 HTTP Header stack-based overflowEPSS 0.7%CVE-2022-3665HIGHAxiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflowEPSS 0.7%CVE-2026-64695CRITICALThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS SoEPSS 0.7%CVE-2022-3664HIGHAxiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflowEPSS 0.7%CVE-2025-2592MEDIUMOpen Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflowEPSS 0.7%CVE-2020-3264HIGHCisco SD-WAN Solution Buffer Overflow VulnerabilityEPSS 0.7%CVE-2021-0217HIGHJunos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packetsEPSS 0.7%CVE-2026-76988MEDIUMliftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-boundsEPSS 0.7%CVE-2026-76989MEDIUMliftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-boundsEPSS 0.7%CVE-2026-86509CRITICALD-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflowEPSS 0.7%CVE-2025-14993HIGHTenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflowEPSS 0.7%CVE-2026-43682CRITICALThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. AEPSS 0.7%CVE-2026-64696CRITICALThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. AEPSS 0.7%CVE-2026-1158HIGHTotolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflowEPSS 0.7%