Fallos del tipo CWE-119

3510 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2022-4639MEDIUMsslh Packet Dumping probe.c hexdump format stringEPSS 0.9%CVE-2026-3015HIGHUTT HiPER 810G formPolicyRouteConf strcpy buffer overflowEPSS 0.9%CVE-2026-4254CRITICALTenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflowEPSS 0.9%CVE-2026-4042HIGHTenda i12 WifiMacFilterGet formWifiMacFilterGet stack-based overflowEPSS 0.9%CVE-2025-4299HIGHTenda AC1206 openSchedWifi setSchedWifi buffer overflowEPSS 0.9%CVE-2025-4368HIGHTenda AC8 MtuSetMacWan formGetRouterStatus buffer overflowEPSS 0.9%CVE-2026-2773CRITICALIncorrect boundary conditions in the Web Audio componentEPSS 0.9%CVE-2025-0574HIGHSante PACS Server URL path Memory Corruption Denial-of-Service VulnerabilityEPSS 0.9%CVE-2020-15196HIGHHeap buffer overflow in TensorflowEPSS 0.9%CVE-2026-82592CRITICALD-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflowEPSS 0.9%CVE-2026-90680CRITICALD-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowEPSS 0.9%CVE-2026-90693CRITICALD-Link DIR-878 WAN Settings SetWan3Settings stack-based overflowEPSS 0.9%CVE-2026-90692CRITICALD-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflowEPSS 0.9%CVE-2026-82593CRITICALD-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflowEPSS 0.9%CVE-2022-39974HIGHWASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.EPSS 0.9%CVE-2025-6565HIGHNetgear WNCE3001 HTTP POST Request http_d stack-based overflowEPSS 0.9%CVE-2026-2186HIGHTenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflowEPSS 0.9%CVE-2026-2187HIGHTenda RX3 formSetQosBand set_qosMib_list stack-based overflowEPSS 0.9%CVE-2025-10779HIGHD-Link DCS-935L HNAP1 sub_402280 stack-based overflowEPSS 0.9%CVE-2025-5866HIGHRT-Thread lwp_syscall.c sys_sigprocmask array indexEPSS 0.9%