Fallos del tipo CWE-119

3278 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-4892MEDIUMcode-projects Police Station Management System Delete Record source.cpp remove stack-based overflowEPSS 0.4%CVE-2025-4890MEDIUMcode-projects Tourism Management System Login User LoginUser stack-based overflowEPSS 0.4%CVE-2025-1372MEDIUMGNU elfutils eu-readelf readelf.c print_string_section buffer overflowEPSS 0.3%CVE-2025-4063MEDIUMcode-projects Student Information Management System cancel stack-based overflowEPSS 0.3%CVE-2024-2929HIGHRockwell Automation Arena Simulation Vulnerable To Memory CorruptionEPSS 0.3%CVE-2025-4062MEDIUMcode-projects Theater Seat Booking System cancel stack-based overflowEPSS 0.3%CVE-2025-1587MEDIUMSourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflowEPSS 0.3%CVE-2025-4061MEDIUMcode-projects Clothing Store Management System add_item stack-based overflowEPSS 0.3%CVE-2023-23457MEDIUMUpx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cppEPSS 0.3%CVE-2023-3576MEDIUMLibtiff: memory leak in tiffcrop.cEPSS 0.3%CVE-2025-43504MEDIUMA buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position maEPSS 0.3%CVE-2024-7024CRITICALInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escapeEPSS 0.3%CVE-2024-11575HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-4888MEDIUMcode-projects Pharmacy Management System Add Order Details take_order buffer overflowEPSS 0.3%CVE-2025-4891MEDIUMcode-projects Police Station Management System Display Record source.cpp display buffer overflowEPSS 0.3%CVE-2025-4501MEDIUMcode-projects Album Management System Search Albums searchalbum stack-based overflowEPSS 0.3%CVE-2019-1630MEDIUMCisco Integrated Management Controller Denial of Service VulnerabilityEPSS 0.3%CVE-2025-4499MEDIUMcode-projects Simple Hospital Management System Add Information add stack-based overflowEPSS 0.3%CVE-2024-11574HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-4889MEDIUMcode-projects Tourism Management System User Registration AddUser buffer overflowEPSS 0.3%