Fallos del tipo CWE-119

3266 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2026-10063HIGHTRENDnet TEW-432BRP formWPS stack-based overflowEPSS 0.9%CVE-2026-1328HIGHTotolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflowEPSS 0.9%CVE-2026-8764HIGHH3C Magic B3 aspForm UpdateWanParams buffer overflowEPSS 0.9%CVE-2026-4172HIGHTRENDnet TEW-632BRP HTTP POST Request ping_response.cgi stack-based overflowEPSS 0.9%CVE-2022-46295CRITICALMultiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open BabEPSS 0.9%CVE-2022-46294CRITICALMultiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open BabEPSS 0.9%CVE-2022-46293CRITICALMultiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open BabEPSS 0.9%CVE-2026-2186HIGHTenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflowEPSS 0.8%CVE-2025-4368HIGHTenda AC8 MtuSetMacWan formGetRouterStatus buffer overflowEPSS 0.8%CVE-2025-4299HIGHTenda AC1206 openSchedWifi setSchedWifi buffer overflowEPSS 0.8%CVE-2026-2187HIGHTenda RX3 formSetQosBand set_qosMib_list stack-based overflowEPSS 0.8%CVE-2022-3649LOWLinux Kernel BPF inode.c nilfs_new_inode use after freeEPSS 0.8%CVE-2025-15091HIGHUTT 进取 512W formPictureUrl strcpy buffer overflowEPSS 0.8%CVE-2025-7853HIGHTenda FH451 SetIpBind fromSetIpBind stack-based overflowEPSS 0.8%CVE-2025-7758HIGHTOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflowEPSS 0.8%CVE-2025-7913HIGHTOTOLINK T6 MQTT Service updateWifiInfo buffer overflowEPSS 0.8%CVE-2025-15092HIGHUTT 进取 512W ConfigExceptMSN strcpy buffer overflowEPSS 0.8%CVE-2026-5315MEDIUMNothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-boundsEPSS 0.8%CVE-2026-64771CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26EPSS 0.8%CVE-2026-5314MEDIUMNothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-boundsEPSS 0.8%