Fallos del tipo CWE-119

3511 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2020-13524MEDIUMAn out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crEPSS 0.8%CVE-2022-39392MEDIUMWasmtime vulnerable to out of bounds read/write with zero-memory-pages configurationEPSS 0.8%CVE-2026-4211HIGHD-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflowEPSS 0.8%CVE-2026-4212HIGHD-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflowEPSS 0.8%CVE-2026-6015HIGHTenda AC9 POST Request QuickIndex formQuickIndex stack-based overflowEPSS 0.8%CVE-2023-5131HIGHDelta Electronics ISPSoft Heap Buffer-OverflowEPSS 0.8%CVE-2026-5043HIGHBelkin F9K1122 Parameter formSetPassword stack-based overflowEPSS 0.8%CVE-2021-44440—A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected prEPSS 0.8%CVE-2026-3728HIGHTenda F453 setcfm fromSetCfm stack-based overflowEPSS 0.8%CVE-2026-3727HIGHTenda F453 QuickIndex sub_3C6C0 stack-based overflowEPSS 0.8%CVE-2026-3379HIGHTenda F453 SetIpBind fromSetIpBind buffer overflowEPSS 0.8%CVE-2026-3272HIGHTenda F453 httpd DhcpListClient fromDhcpListClient buffer overflowEPSS 0.8%CVE-2025-2751MEDIUMOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-boundsEPSS 0.8%CVE-2026-3377HIGHTenda F453 SafeUrlFilter fromSafeUrlFilter buffer overflowEPSS 0.8%CVE-2026-3376HIGHTenda F453 SafeMacFilter fromSafeMacFilter buffer overflowEPSS 0.8%CVE-2025-11385HIGHTenda AC20 fast_setting_wifi_set sscanf buffer overflowEPSS 0.8%CVE-2025-11526HIGHTenda AC7 WifiMacFilterSet stack-based overflowEPSS 0.8%CVE-2026-43810CRITICALThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOEPSS 0.8%CVE-2025-13550HIGHD-Link DIR-822K/DWR-M920 formVpnConfigSetup buffer overflowEPSS 0.8%CVE-2025-13551HIGHD-Link DIR-822K/DWR-M920 formWanConfigSetup buffer overflowEPSS 0.8%