Fallos del tipo CWE-119

3506 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-43429MEDIUMA buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 anEPSS 1.5%CVE-2025-5619HIGHTenda CH22 addUserName formaddUserName stack-based overflowEPSS 1.4%CVE-2017-2575—A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of funEPSS 1.4%CVE-2025-5969HIGHD-Link DIR-632 HTTP POST Request biurl_grou FUN_00425fd8 stack-based overflowEPSS 1.4%CVE-2025-8244HIGHTOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflowEPSS 1.4%CVE-2019-1641HIGHCisco Webex Network Recording Player Arbitrary Code Execution VulnerabilitiesEPSS 1.4%CVE-2022-3667HIGHAxiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflowEPSS 1.4%CVE-2021-21833CRITICALAn improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack functionality of Accusoft ImageGear 19.9. A speciEPSS 1.4%CVE-2025-4809HIGHTenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflowEPSS 1.4%CVE-2019-1214HIGHAn elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aEPSS 1.4%KEVCVE-2024-8573HIGHTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflowEPSS 1.4%CVE-2019-15284HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.4%CVE-2019-15286HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 1.4%CVE-2021-1279HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-34781HIGHCisco Firepower Threat Defense Software SSH Connections Denial of Service VulnerabilityEPSS 1.4%CVE-2021-1241HIGHCisco SD-WAN Denial of Service VulnerabilitiesEPSS 1.4%CVE-2023-35002CRITICALA heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed fEPSS 1.4%CVE-2021-1402HIGHCisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service VulnerabilityEPSS 1.4%CVE-1999-0069HIGHSolaris ufsrestore buffer overflow.EPSS 1.4%CVE-2017-6720—A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote aEPSS 1.4%