Fallos del tipo CWE-119

3266 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2022-20947HIGHA vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat DefeEPSS 0.9%CVE-2026-1155HIGHTotolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflowEPSS 0.9%CVE-2025-6336HIGHTOTOLINK EX1200T HTTP POST Request formTmultiAP buffer overflowEPSS 0.9%CVE-2025-5869HIGHRT-Thread lwp_syscall.c sys_recvfrom memory corruptionEPSS 0.9%CVE-2025-5793HIGHTOTOLINK EX1200T HTTP POST Request formPortFw buffer overflowEPSS 0.9%CVE-2025-6373HIGHD-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflowEPSS 0.9%CVE-2025-6881HIGHD-Link DI-8100 jhttpd pppoe_base.asp buffer overflowEPSS 0.9%CVE-2022-3534MEDIUMLinux Kernel libbpf btf_dump.c btf_dump_name_dups use after freeEPSS 0.9%CVE-2026-5815HIGHD-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflowEPSS 0.9%CVE-2026-82592CRITICALD-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflowEPSS 0.9%CVE-2021-32490—A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to appEPSS 0.9%CVE-2026-90693CRITICALD-Link DIR-878 WAN Settings SetWan3Settings stack-based overflowEPSS 0.9%CVE-2026-90692CRITICALD-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflowEPSS 0.9%CVE-2026-90680CRITICALD-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowEPSS 0.9%CVE-2026-82593CRITICALD-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflowEPSS 0.9%CVE-2026-8186MEDIUMOpen5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-boundsEPSS 0.9%CVE-2022-41175—Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted soEPSS 0.9%CVE-2020-15196HIGHHeap buffer overflow in TensorflowEPSS 0.9%CVE-2025-7094HIGHBelkin F9K1122 webs formBSSetSitesurvey stack-based overflowEPSS 0.9%CVE-2024-24561CRITICALVyper bounds check on built-in `slice()` function can be overflowedEPSS 0.9%