Fallos del tipo CWE-119

3282 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2020-27802—An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.EPSS 0.3%CVE-2026-18291HIGHOriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-18292HIGHOriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-18294HIGHOriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-43424MEDIUMThe issue was addressed with improved bounds checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. A malicious HID deviEPSS 0.3%CVE-2024-8815HIGHPDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-3548MEDIUMOpen Asset Import Library Assimp File types.h Set heap-based overflowEPSS 0.3%CVE-2021-1111MEDIUMBootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds checkEPSS 0.3%CVE-2025-3549MEDIUMOpen Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflowEPSS 0.3%CVE-2023-45221MEDIUMImproper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilegEPSS 0.3%CVE-2025-10997MEDIUMOpen Babel chemkinformat.cpp CheckSpecies heap-based overflowEPSS 0.3%CVE-2025-10996MEDIUMOpen Babel smilesformat.cpp ParseSmiles heap-based overflowEPSS 0.3%CVE-2022-47935HIGHA vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versionsEPSS 0.3%CVE-2025-5245MEDIUMGNU Binutils objdump debug.c debug_type_samep memory corruptionEPSS 0.3%CVE-2022-47967HIGHA vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability thaEPSS 0.3%CVE-2025-3160MEDIUMOpen Asset Import Library Assimp File SceneCombiner.cpp AddNodeHashes out-of-boundsEPSS 0.3%CVE-2025-11840MEDIUMGNU Binutils ldmisc.c vfinfo out-of-boundsEPSS 0.3%CVE-2024-11611HIGHAutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-8962MEDIUMcode-projects Hostel Management System Login Form hostel_manage.exe stack-based overflowEPSS 0.3%CVE-2024-11610HIGHAutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%