Weaknesses of type CWE-119

3,268 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2024-54551HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOSEPSS 0.6%CVE-2022-41201HIGHDue to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusteEPSS 0.6%CVE-2022-3216MEDIUMNintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruptionEPSS 0.6%CVE-2026-8655HIGHMultiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of ServiceEPSS 0.6%CVE-2022-32588CRITICALAn out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0. A specially-craftedEPSS 0.6%CVE-2026-82820MEDIUMFLVMeta AMF String Processing amf.c amf_string_new heap-based overflowEPSS 0.6%CVE-2022-39392MEDIUMWasmtime vulnerable to out of bounds read/write with zero-memory-pages configurationEPSS 0.6%CVE-2023-46586CRITICALcgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused.EPSS 0.6%CVE-2025-14187HIGHUGREEN DH2100+ nas_svr create handler_file_backup_create buffer overflowEPSS 0.6%CVE-2026-5683MEDIUMTenda CX12L P2pListFilter fromP2pListFilter stack-based overflowEPSS 0.6%CVE-2026-5245MEDIUMCesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflowEPSS 0.6%CVE-2026-78049MEDIUMSysterel S2OPC AddNodes Service sopc_node_mgt_helper_internal.c out-of-boundsEPSS 0.6%CVE-2024-47796HIGHAn improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file cEPSS 0.6%CVE-2024-52333HIGHAn improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOMEPSS 0.6%CVE-2014-125018MEDIUMFFmpeg decode_slice_header memory corruptionEPSS 0.6%CVE-2014-125010MEDIUMFFmpeg h64.c decode_slice_header memory corruptionEPSS 0.6%CVE-2022-43762HIGHMemory leak when receiving messages in APROL Tbase serverEPSS 0.6%CVE-2025-15460HIGHUTT 进取 520W formPptpClientConfig strcpy buffer overflowEPSS 0.6%CVE-2023-20529HIGHInsufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in EPSS 0.6%CVE-2023-20531HIGHInsufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resultinEPSS 0.6%