Fallos del tipo CWE-119

3239 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2022-30938—A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versEPSS 1.3%CVE-2024-24476HIGHA buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_loEPSS 1.3%CVE-2025-6112HIGHTenda FH1205 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2025-6113HIGHTenda FH1203 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2025-4809HIGHTenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflowEPSS 1.3%CVE-2025-5619HIGHTenda CH22 addUserName formaddUserName stack-based overflowEPSS 1.3%CVE-2023-1729—A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.EPSS 1.3%CVE-2021-40400CRITICALAn out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1EPSS 1.3%CVE-2021-20284—A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due EPSS 1.3%CVE-2016-10012HIGHThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds checkEPSS 1.3%CVE-2020-1671HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.EPSS 1.3%CVE-2020-28600HIGHAn out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crEPSS 1.3%CVE-2020-3273HIGHCisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service VulnerabilityEPSS 1.3%CVE-2025-8160HIGHTenda AC20 httpd SetSysTimeCfg buffer overflowEPSS 1.3%CVE-2021-38405HIGHSiemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.3%CVE-2024-11248HIGHTenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowEPSS 1.3%CVE-2023-2794HIGHOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() functionEPSS 1.3%CVE-2020-35527—In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.EPSS 1.2%CVE-2025-11327HIGHTenda AC18 SetUpnpCfg stack-based overflowEPSS 1.2%CVE-2025-11326HIGHTenda AC18 WifiMacFilterSet stack-based overflowEPSS 1.2%