Fallos del tipo CWE-119

3269 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2023-28638HIGHStack references to locations outside buffers may become invalid if they exist during a GC compaction in SnappierEPSS 0.6%CVE-2026-82631LOWvalkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after freeEPSS 0.6%CVE-2026-91086MEDIUMGPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflowEPSS 0.6%CVE-2025-2338MEDIUMtbeu matio io.c strdup_vprintf heap-based overflowEPSS 0.6%CVE-2023-26974MEDIUMIrfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.EPSS 0.6%CVE-2021-1137HIGHCisco SD-WAN vManage Software VulnerabilitiesEPSS 0.5%CVE-2026-42488HIGHx86: mismatched mapcache metadataEPSS 0.5%CVE-2021-3489HIGHLinux kernel eBPF RINGBUF map oversized allocationEPSS 0.5%CVE-2025-15555MEDIUMOpen5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflowEPSS 0.5%CVE-2026-39863HIGHKamailio Core: TCP Data Processing VulnerabilityEPSS 0.5%CVE-2026-54559MEDIUMPocketSphinx: Buffer overflows in language and acoustic model loading codeEPSS 0.5%CVE-2023-43815HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code ExecutionEPSS 0.5%CVE-2025-15008MEDIUMTenda WH450 HTTP Request L7Port stack-based overflowEPSS 0.5%CVE-2024-26149LOWVyper _abi_decode Memory OverflowEPSS 0.5%CVE-2026-82587MEDIUMOpen5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruptionEPSS 0.5%CVE-2017-16231MEDIUMIn PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-rEPSS 0.5%CVE-2022-29486MEDIUMImproper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenEPSS 0.5%CVE-2026-28904HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOSEPSS 0.5%CVE-2026-28905HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS EPSS 0.5%CVE-2026-2940MEDIUMZaher1307 tiny_web_server URL tiny.c out-of-bounds writeEPSS 0.5%