Fallos del tipo CWE-119

3289 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-25175HIGHA vulnerability has been identified in Simcenter Femap V2401 (All versions < V2401.0003), Simcenter Femap V2406 (All versions < V2406.0002).EPSS 0.2%CVE-2025-15538MEDIUMOpen Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after freeEPSS 0.2%CVE-2026-3663MEDIUMxlnt-community xlnt XLSX File compound_document.cpp xsgetn out-of-boundsEPSS 0.2%CVE-2023-25509MEDIUMNVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges.EPSS 0.2%CVE-2026-2258MEDIUMaardappel lobster wfc.h WaveFunctionCollapse memory corruptionEPSS 0.2%CVE-2026-9541MEDIUMSquirrel Cnut File sqobject.cpp ReadObject heap-based overflowEPSS 0.2%CVE-2023-49699MEDIUMOut-of-bounds access a buffer in IMSEPSS 0.2%CVE-2026-2858MEDIUMwren-lang wren Source File wren_compiler.c peekChar out-of-boundsEPSS 0.2%CVE-2025-14419HIGHpdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-3664MEDIUMxlnt-community xlnt Encrypted XLSX File compound_document.cpp read_directory out-of-boundsEPSS 0.2%CVE-2026-3606MEDIUMEttercap etterfilter ef_output.c add_data_segment out-of-boundsEPSS 0.2%CVE-2025-3017MEDIUMTA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds writeEPSS 0.2%CVE-2022-42286MEDIUMDGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges.EPSS 0.2%CVE-2024-33658MEDIUMBuffer Overflow Vulnerability In OFBDEPSS 0.2%CVE-2023-28383MEDIUMImproper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via EPSS 0.2%CVE-2025-3144MEDIUMMindSpore mindspore.numpy.fft.hfftn memory corruptionEPSS 0.2%CVE-2026-20024MEDIUMA vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacEPSS 0.2%CVE-2024-0645HIGHBuffer Overflow Vulnerability in Explorer++EPSS 0.2%CVE-2025-43398MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS EPSS 0.2%CVE-2026-28896HIGHThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 1EPSS 0.2%