Fallos del tipo CWE-119

3262 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-5907HIGHTOTOLINK EX1200T HTTP POST Request formFilter buffer overflowEPSS 6.2%CVE-2025-5901HIGHTOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflowEPSS 6.2%CVE-2017-1000257CRITICALAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libEPSS 6.2%CVE-2025-43539HIGHThe issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS SeEPSS 6.2%CVE-2025-4897HIGHTenda A15 HTTP POST Request multimodalAdd buffer overflowEPSS 6.1%CVE-2025-5790HIGHTOTOLINK X15 HTTP POST Request formIpQoS buffer overflowEPSS 6.0%CVE-2025-5785HIGHTOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflowEPSS 6.0%CVE-2025-5788HIGHTOTOLINK X15 HTTP POST Request formReflashClientTbl buffer overflowEPSS 6.0%CVE-2025-5787HIGHTOTOLINK X15 HTTP POST Request formWsc buffer overflowEPSS 6.0%CVE-2025-5786HIGHTOTOLINK X15 HTTP POST Request formDMZ buffer overflowEPSS 6.0%CVE-2025-7091HIGHBelkin F9K1122 webs formWlanMP stack-based overflowEPSS 6.0%CVE-2017-6753—A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, remote attacker to eEPSS 6.0%CVE-2025-5902HIGHTOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflowEPSS 5.9%CVE-2018-5473—An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices runninEPSS 5.9%CVE-2026-7854CRITICALD-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflowEPSS 5.9%CVE-2025-14709CRITICALShiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflowEPSS 5.9%CVE-2025-5572HIGHD-Link DCS-932L setSystemEmail stack-based overflowEPSS 5.8%CVE-2025-5792HIGHTOTOLINK EX1200T HTTP POST Request formWlanRedirect buffer overflowEPSS 5.8%CVE-2020-3323CRITICALCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution VulnerabilityEPSS 5.7%CVE-2025-7945HIGHD-Link DIR-513 formSetWanDhcpplus buffer overflowEPSS 5.7%