Fallos del tipo CWE-119

3239 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2021-30499—A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and other potential consEPSS 1.2%CVE-2025-9360HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflowEPSS 1.2%CVE-2022-30937—A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versEPSS 1.2%CVE-2020-15207HIGHSegfault and data corruption in tensorflow-liteEPSS 1.2%CVE-2024-36129HIGHOpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPCEPSS 1.2%CVE-2022-29503HIGHA memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocaEPSS 1.2%CVE-2024-11061HIGHTenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflowEPSS 1.2%CVE-2025-5798HIGHTenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflowEPSS 1.2%CVE-2025-5799HIGHTenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflowEPSS 1.2%CVE-2021-33479—A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c.EPSS 1.2%CVE-2025-5600CRITICALTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.2%CVE-2020-35521—A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denialEPSS 1.2%CVE-2025-4843HIGHD-Link DCS-932L udev SubUPnPCSInit stack-based overflowEPSS 1.2%CVE-2025-4841HIGHD-Link DCS-932L gpio sub_404780 stack-based overflowEPSS 1.2%CVE-2025-4842HIGHD-Link DCS-932L ucp isUCPCameraNameChanged stack-based overflowEPSS 1.2%CVE-2023-45235HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2023-45230HIGHBuffer Overflow in EDK II Network PackageEPSS 1.2%CVE-2021-33481—A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.EPSS 1.2%CVE-2025-7909HIGHD-Link DIR-513 Boa Webserver formLanSetupRouterSettings sprintf stack-based overflowEPSS 1.2%CVE-2025-7910HIGHD-Link DIR-513 Boa Webserver formSetWanNonLogin sprintf stack-based overflowEPSS 1.2%