Fallos del tipo CWE-119

3508 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-6291HIGHD-Link DIR-825 HTTP POST Request do_file stack-based overflowEPSS 1.3%CVE-2025-6292HIGHD-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflowEPSS 1.3%CVE-2025-6113HIGHTenda FH1203 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2025-6112HIGHTenda FH1205 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2023-40661MEDIUMOpensc: multiple memory issues with pkcs15-init (enrollment tool)EPSS 1.3%CVE-2024-11745HIGHTenda AC8 SetStaticRouteCfg route_static_check stack-based overflowEPSS 1.3%CVE-2025-8242HIGHTOTOLINK X15 HTTP POST Request formFilter buffer overflowEPSS 1.3%CVE-2022-29503HIGHA memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocaEPSS 1.3%CVE-2021-0227HIGHJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packetsEPSS 1.3%CVE-2021-46157—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.3%CVE-2025-6616HIGHD-Link DIR-619L formSetWAN_Wizard51 stack-based overflowEPSS 1.3%CVE-2025-9360HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflowEPSS 1.3%CVE-2025-8170HIGHTOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflowEPSS 1.3%CVE-2025-7602HIGHD-Link DI-8100 HTTP Request arp_sys.asp stack-based overflowEPSS 1.3%CVE-2025-7603HIGHD-Link DI-8100 HTTP Request jingx.asp stack-based overflowEPSS 1.3%CVE-2025-9087HIGHTenda AC20 SetNetControlList Endpoint set_qosMib_list stack-based overflowEPSS 1.3%CVE-2024-24476HIGHA buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_loEPSS 1.3%CVE-2022-30937—A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versEPSS 1.3%CVE-2025-7570HIGHUTT HiPER 840G aspRemoteApConfTempSend buffer overflowEPSS 1.3%CVE-2025-4342HIGHD-Link DIR-600L formEasySetupWizard3 buffer overflowEPSS 1.3%