Fallos del tipo CWE-119

3510 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-9023HIGHTenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflowEPSS 0.9%CVE-2025-9046HIGHTenda AC20 setMacFilterCfg sub_46A2AC stack-based overflowEPSS 0.9%CVE-2022-3664HIGHAxiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflowEPSS 0.9%CVE-2022-3665HIGHAxiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflowEPSS 0.9%CVE-2021-38473HIGHAUVESY VersiondogEPSS 0.9%CVE-2020-15266LOWUndefined behavior in TensorflowEPSS 0.9%CVE-2025-6336HIGHTOTOLINK EX1200T HTTP POST Request formTmultiAP buffer overflowEPSS 0.9%CVE-2022-26772HIGHA memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be abEPSS 0.9%CVE-2022-31747CRITICALMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 andEPSS 0.9%CVE-2025-6373HIGHD-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflowEPSS 0.9%CVE-2025-3161HIGHTenda AC10 ShutdownSetAdd stack-based overflowEPSS 0.9%CVE-2026-2935HIGHUTT HiPER 810G ConfigExceptMSN strcpy buffer overflowEPSS 0.9%CVE-2022-24936HIGHGecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devicesEPSS 0.9%CVE-2025-5156HIGHH3C GR-5400AX aspForm EditWlanMacList buffer overflowEPSS 0.9%CVE-2023-0613HIGHTRENDnet TEW-811DRU httpd security.asp memory corruptionEPSS 0.9%CVE-2021-22712—A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA SystemEPSS 0.9%CVE-2023-0618HIGHTRENDnet TEW-652BRP Web Service cfg_op.ccp memory corruptionEPSS 0.9%CVE-2026-91001CRITICALD-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflowEPSS 0.9%CVE-2025-15462HIGHUTT 进取 520W ConfigAdvideo strcpy buffer overflowEPSS 0.9%CVE-2026-3703CRITICALWavlink NU516U1 login.cgi sub_401A10 out-of-bounds writeEPSS 0.9%