Fallos del tipo CWE-119

3264 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-9525HIGHLinksys E1700 setWan stack-based overflowEPSS 1.4%CVE-2025-9526HIGHLinksys E1700 setSysAdm stack-based overflowEPSS 1.4%CVE-2025-4146HIGHNetgear EX6200 sub_41940 buffer overflowEPSS 1.4%CVE-2019-15284HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.4%CVE-2019-15286HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.4%CVE-2025-43429MEDIUMA buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 anEPSS 1.4%CVE-1999-0069HIGHSolaris ufsrestore buffer overflow.EPSS 1.4%CVE-2017-6720—A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote aEPSS 1.4%CVE-2024-22391HIGHA heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A spEPSS 1.4%CVE-2025-9481HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflowEPSS 1.4%CVE-2021-34781HIGHCisco Firepower Threat Defense Software SSH Connections Denial of Service VulnerabilityEPSS 1.4%CVE-2021-1402HIGHCisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service VulnerabilityEPSS 1.4%CVE-2021-1279HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-1241HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-1273HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2024-45169CRITICALAn issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and iEPSS 1.4%CVE-2026-7069HIGHD-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflowEPSS 1.4%CVE-2025-5912HIGHD-Link DIR-632 HTTP POST Request do_file stack-based overflowEPSS 1.4%CVE-2021-3826—Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of servicEPSS 1.4%CVE-2025-5909HIGHTOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflowEPSS 1.4%