Weaknesses of type CWE-119

3,268 results

Corrupção de memória genérica

Fraqueza ampla que descreve qualquer escrita ou leitura inadequada de dados na memória do programa, violando os limites esperados de um buffer, estrutura ou alocação. O risco é grave: pode levar a travamento, execução de código arbitrário ou exposição de dados sensíveis, dependendo de como o atacante explora o acesso descontrolado.

Example

Um programa C lê mais bytes de um array do que deveria (estouro de buffer clássico), ou escreve em endereço de memória inválido após liberar um ponteiro. Em ambos os casos, dados adjacentes são sobrescrevidos ou corrompidos, causando comportamento impredizível ou crash.

How to mitigate

Use verificações de limites antes de qualquer acesso indexado; prefira linguagens com gerenciamento automático de memória (Go, Rust, Python) quando possível; em C/C++, empregue ferramentas como AddressSanitizer em testes e ASLR+DEP/NX em produção para dificultar exploração. Revise ponteiros e aritmética de buffer em code review.

CVE-2026-5317MEDIUMNothings stb stb_vorbis.c start_decoder out-of-bounds writeEPSS 0.6%CVE-2026-2181HIGHTenda RX3 openSchedWifi stack-based overflowEPSS 0.6%CVE-2024-30253HIGHHandling untrusted input can result in a crash, leading to loss of availability / denial of serviceEPSS 0.6%CVE-2025-2337MEDIUMtbeu matio mat.c Mat_VarPrint heap-based overflowEPSS 0.6%CVE-2022-41196—Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sourcesEPSS 0.6%CVE-2025-7208MEDIUM9fans plan9port x509.c edump heap-based overflowEPSS 0.6%CVE-2025-2151MEDIUMOpen Asset Import Library Assimp File ParsingUtils.h GetNextLine stack-based overflowEPSS 0.6%CVE-2026-2930MEDIUMTenda A18 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflowEPSS 0.6%CVE-2026-92036CRITICALIncorrect boundary conditions in the Networking: HTTP componentEPSS 0.6%CVE-2024-9396HIGHIt is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to mEPSS 0.6%CVE-2026-92061CRITICALIncorrect boundary conditions in the Security: Process Sandboxing componentEPSS 0.6%CVE-2026-92037CRITICALIncorrect boundary conditions in the DOM: Animation componentEPSS 0.6%CVE-2026-8975HIGHMemory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151EPSS 0.6%CVE-2024-8937HIGHCWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitraryEPSS 0.6%CVE-2026-13590MEDIUMseladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflowEPSS 0.6%CVE-2026-64697CRITICALThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. AEPSS 0.6%CVE-2026-13588MEDIUMseladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflowEPSS 0.6%CVE-2026-39873CRITICALThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. CEPSS 0.6%CVE-2026-64698CRITICALThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. AEPSS 0.6%CVE-2026-43694CRITICALThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. AEPSS 0.6%