Fallos del tipo CWE-119

3289 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2026-15182MEDIUMGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflowEPSS 0.2%CVE-2026-28896HIGHThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 1EPSS 0.2%CVE-2025-43398MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS EPSS 0.2%CVE-2023-3889HIGHMali GPU Kernel Driver exposes sensitive data from freed memoryEPSS 0.2%CVE-2023-6361HIGHA vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlEPSS 0.2%CVE-2025-15506MEDIUMAcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-boundsEPSS 0.2%CVE-2023-6362HIGHA vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlEPSS 0.2%CVE-2023-3953MEDIUM A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption EPSS 0.2%CVE-2026-94142CRITICALBioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-whereEPSS 0.2%CVE-2025-7546MEDIUMGNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds writeEPSS 0.2%CVE-2026-94129CRITICALBioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-whereEPSS 0.2%CVE-2025-6490MEDIUMsparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflowEPSS 0.2%CVE-2026-94146CRITICALBioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-whereEPSS 0.2%CVE-2026-94128CRITICALBioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-whereEPSS 0.2%CVE-2025-46333HIGHz2d OOB composition could lead to invalid memory access and corruptionEPSS 0.2%CVE-2022-20599MEDIUMIn Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of prEPSS 0.2%CVE-2024-23980HIGHImproper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products may allow a privilegeEPSS 0.2%CVE-2024-1174HIGHPrevious versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities. HP has released HP ThinPrEPSS 0.2%CVE-2025-11947LOWbftpd Configuration File options.c expand_groups heap-based overflowEPSS 0.2%CVE-2025-6494MEDIUMsparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflowEPSS 0.2%