Fallos del tipo CWE-119

3508 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-4343HIGHD-Link DIR-600L formEasySetupWizard buffer overflowEPSS 1.3%CVE-2023-1729—A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.EPSS 1.3%CVE-2021-40400CRITICALAn out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1EPSS 1.3%CVE-2021-20284—A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due EPSS 1.3%CVE-2025-7837HIGHTOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflowEPSS 1.3%CVE-2016-10012HIGHThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds checkEPSS 1.3%CVE-2025-7912HIGHTOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflowEPSS 1.3%CVE-2025-7532HIGHTenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.3%CVE-2025-8245HIGHTOTOLINK X15 HTTP POST Request formMultiAPVLAN buffer overflowEPSS 1.3%CVE-2025-7855HIGHTenda FH451 qossetting fromqossetting stack-based overflowEPSS 1.3%CVE-2020-1671HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.EPSS 1.3%CVE-2020-3273HIGHCisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service VulnerabilityEPSS 1.3%CVE-2020-28600HIGHAn out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crEPSS 1.3%CVE-2025-11326HIGHTenda AC18 WifiMacFilterSet stack-based overflowEPSS 1.3%CVE-2025-11327HIGHTenda AC18 SetUpnpCfg stack-based overflowEPSS 1.3%CVE-2020-11046MEDIUMImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPEPSS 1.3%CVE-2021-38405HIGHSiemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.3%CVE-2025-43186CRITICALThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.EPSS 1.3%CVE-2025-6370HIGHD-Link DIR-619L formWlanGuestSetup stack-based overflowEPSS 1.3%CVE-2025-6368HIGHD-Link DIR-619L formSetEmail stack-based overflowEPSS 1.3%