Fallos del tipo CWE-119

3511 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2022-1350MEDIUMGhostPCL gsmchunk.c chunk_free_object memory corruptionEPSS 0.8%CVE-2026-1328HIGHTotolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflowEPSS 0.8%CVE-2026-2705MEDIUMOpen Babel MOL2 File atom.h SetFormalCharge out-of-boundsEPSS 0.8%CVE-2021-32490—A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to appEPSS 0.8%CVE-2025-5330MEDIUMFreeFloat FTP Server RETR Command buffer overflowEPSS 0.8%CVE-2025-12211HIGHTenda O3 setDmzInfo GetValue stack-based overflowEPSS 0.8%CVE-2021-21784CRITICALAn out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specially crafted malformeEPSS 0.8%CVE-2025-12240HIGHTOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflowEPSS 0.8%CVE-2025-12239HIGHTOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflowEPSS 0.8%CVE-2026-10062HIGHTRENDnet TEW-432BRP formSetRoute stack-based overflowEPSS 0.8%CVE-2026-82539CRITICALTOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruptionEPSS 0.8%CVE-2025-6882HIGHD-Link DIR-513 formSetWanPPTP buffer overflowEPSS 0.8%CVE-2026-88776HIGHMemory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of ServiceEPSS 0.8%CVE-2026-2929HIGHD-Link DWR-M960 Wireless Access Control Endpoint formWlAc sub_453140 stack-based overflowEPSS 0.8%CVE-2026-2884HIGHD-Link DWR-M960 WAN Interface Setting formWanConfigSetup sub_41914C stack-based overflowEPSS 0.8%CVE-2026-2885HIGHD-Link DWR-M960 formIpv6Setup sub_469104 stack-based overflowEPSS 0.8%CVE-2026-2883HIGHD-Link DWR-M960 formIpQoS sub_427D74 stack-based overflowEPSS 0.8%CVE-2026-2960HIGHD-Link DWR-M960 formDhcpv6s sub_468D64 stack-based overflowEPSS 0.8%CVE-2026-5350HIGHTrendnet TEW-657BRM setup.cgi update_pcdb stack-based overflowEPSS 0.8%CVE-2022-43467CRITICALAn out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. A speEPSS 0.8%