Fallos del tipo CWE-119

3266 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2018-17907—When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can fEPSS 0.9%CVE-2025-6939HIGHTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%CVE-2020-36619MEDIUMmultimon-ng demod_flex.c add_ch format stringEPSS 0.9%CVE-2023-29420MEDIUMAn issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.EPSS 0.9%CVE-2026-4254CRITICALTenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflowEPSS 0.9%CVE-2022-39974HIGHWASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.EPSS 0.9%CVE-2025-10779HIGHD-Link DCS-935L HNAP1 sub_402280 stack-based overflowEPSS 0.9%CVE-2023-4967HIGHDenial of serviceEPSS 0.9%CVE-2025-15179HIGHTenda WH450 qossetting stack-based overflowEPSS 0.9%CVE-2023-2970LOWMindSpore json_helper.cc UpdateArray memory corruptionEPSS 0.9%CVE-2022-26772HIGHA memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be abEPSS 0.9%CVE-2022-4046HIGHCODESYS: Improper memory restrictions fro CODESYS ControlEPSS 0.9%CVE-2026-2853HIGHD-Link DWR-M960 System Log Configuration Endpoint formSysLog sub_462E14 stack-based overflowEPSS 0.9%CVE-2022-31747CRITICALMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 andEPSS 0.9%CVE-2025-0574HIGHSante PACS Server URL path Memory Corruption Denial-of-Service VulnerabilityEPSS 0.9%CVE-2026-2857HIGHD-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub_423E00 stack-based overflowEPSS 0.9%CVE-2025-13288HIGHTenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflowEPSS 0.9%CVE-2025-7194HIGHD-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflowEPSS 0.9%CVE-2025-11408HIGHD-Link DI-7001 MINI dbsrv.asp buffer overflowEPSS 0.9%CVE-2025-9813HIGHTenda CH22 SetSambaConf formSetSambaConf buffer overflowEPSS 0.9%