Weaknesses of type CWE-119

3,287 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2025-43425MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS EPSS 0.7%CVE-2023-27729HIGHNginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.EPSS 0.7%CVE-2026-93741CRITICALTotolink A3002MU formWlWds buffer overflowEPSS 0.7%CVE-2023-27284HIGHIBM Aspera code executionEPSS 0.7%CVE-2022-31748CRITICALMozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs prEPSS 0.7%CVE-2024-10964MEDIUMemqx neuron plugin_handle.c handle_add_plugin buffer overflowEPSS 0.7%CVE-2023-27286HIGHIBM Aspera code executionEPSS 0.7%CVE-2026-96891CRITICALD-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds writeEPSS 0.7%CVE-2022-31740HIGHOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitEPSS 0.7%CVE-2026-64726CRITICALThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOEPSS 0.7%CVE-2025-31204HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOEPSS 0.7%CVE-2023-5130HIGHDelta Electronics WPLSoft Buffer-OverflowEPSS 0.6%CVE-2024-21916HIGHRockwell Automation Denial-of-service Vulnerability in ICE1 ControllerEPSS 0.6%CVE-2014-2355—GE Proficy HMI/SCADA CIMPLICITY CimViewEPSS 0.6%CVE-2025-6091HIGHH3C GR-3000AX aspForm UpdateIpv6Params buffer overflowEPSS 0.6%CVE-2025-6090HIGHH3C GR-5400AX aspForm UpdateIpv6params buffer overflowEPSS 0.6%CVE-2026-2086HIGHUTT HiPER 810G Management formFireWall strcpy buffer overflowEPSS 0.6%CVE-2022-24322MEDIUMA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of comEPSS 0.6%CVE-2026-19968MEDIUMOpen Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflowEPSS 0.6%CVE-2026-91087MEDIUMGPAC Compositor media_object.c gf_mo_get_od_id use after freeEPSS 0.6%