Fallos del tipo CWE-119

3506 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-9525HIGHLinksys E1700 setWan stack-based overflowEPSS 1.5%CVE-2014-0779—Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.5%CVE-2019-1640HIGHCisco Webex Network Recording Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2019-1639HIGHCisco Webex Network Recording Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2023-33975CRITICALRIOT-OS vulnerable to Out of Bounds Write in _rbuf_addEPSS 1.5%CVE-2019-1637HIGHCisco Webex Network Recording Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2019-1638HIGHCisco Webex Network Recording Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2023-28391CRITICALA memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafEPSS 1.5%CVE-2022-25959HIGHRockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.5%CVE-2019-1927HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2019-1924HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2025-6098CRITICALUTT 进取 750W API setSysAdm strcpy buffer overflowEPSS 1.5%CVE-2025-1853HIGHTenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflowEPSS 1.5%CVE-2025-9481HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflowEPSS 1.5%CVE-2025-3988HIGHTOTOLINK N150RT formPortFw buffer overflowEPSS 1.5%CVE-2022-3564MEDIUMLinux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after freeEPSS 1.5%CVE-2025-1538HIGHD-Link DAP-1320 api set_ws_action heap-based overflowEPSS 1.5%CVE-2019-1928HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2019-1929HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%CVE-2019-1925HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.5%