Fallos del tipo CWE-119

3283 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2022-41182—Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly (.x_b, CoreCadTranslator.exe) file receEPSS 0.3%CVE-2022-41171—Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusEPSS 0.3%CVE-2026-12301MEDIUMMemory safety bug fixed in Firefox 152EPSS 0.3%CVE-2026-12310HIGHMemory safety bug fixed in Firefox 152EPSS 0.3%CVE-2026-12312HIGHMemory safety bug fixed in Firefox 152EPSS 0.3%CVE-2026-12300MEDIUMMemory safety bug fixed in Firefox 152EPSS 0.3%CVE-2026-12314HIGHMemory safety bug fixed in Firefox 152EPSS 0.3%CVE-2025-10995MEDIUMOpen Babel zipstreamimpl.h underflow memory corruptionEPSS 0.3%CVE-2026-20605MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS SonoEPSS 0.3%CVE-2021-36342HIGHDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliEPSS 0.3%CVE-2025-8176MEDIUMLibTIFF tiffmedian.c get_histogram use after freeEPSS 0.3%CVE-2025-7069MEDIUMHDF5 H5FSsection.c H5FS__sect_link_size heap-based overflowEPSS 0.3%CVE-2023-0198MEDIUMNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of operations within the bEPSS 0.3%CVE-2025-7067MEDIUMHDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflowEPSS 0.3%CVE-2026-1108MEDIUMcijliu librtsp rtsp_rely_dumps buffer overflowEPSS 0.2%CVE-2025-5167MEDIUMOpen Asset Import Library Assimp LWOLoader.h GetS0 out-of-boundsEPSS 0.2%CVE-2025-5168MEDIUMOpen Asset Import Library Assimp MDLLoader.cpp ImportUVCoordinate_3DGS_MDL345 out-of-boundsEPSS 0.2%CVE-2025-5165MEDIUMOpen Asset Import Library Assimp MDCLoader.cpp ValidateSurfaceHeader out-of-boundsEPSS 0.2%CVE-2026-1109MEDIUMcijliu librtsp rtsp_parse_request buffer overflowEPSS 0.2%CVE-2025-5169MEDIUMOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_3DGS_MDL345 out-of-boundsEPSS 0.2%