Fallos del tipo CWE-119

3266 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2021-43314—A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). ThEPSS 0.8%CVE-2024-27879HIGHThe issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may EPSS 0.8%CVE-2021-43313—A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggEPSS 0.8%CVE-2021-43312—A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggEPSS 0.8%CVE-2021-43311—A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). TheEPSS 0.8%CVE-2025-7527HIGHTenda FH1202 AdvSetWan fromAdvSetWan stack-based overflowEPSS 0.8%CVE-2025-7529HIGHTenda FH1202 Natlimit fromNatlimit stack-based overflowEPSS 0.8%CVE-2023-0637MEDIUMTRENDnet TEW-811DRU Web Management Interface wan.asp memory corruptionEPSS 0.8%CVE-2025-7530HIGHTenda FH1202 PPTPDClient fromPptpUserAdd stack-based overflowEPSS 0.8%CVE-2025-7528HIGHTenda FH1202 GstDhcpSetSer fromGstDhcpSetSer stack-based overflowEPSS 0.8%CVE-2025-7468HIGHTenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflowEPSS 0.8%CVE-2025-8019HIGHShenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflowEPSS 0.8%CVE-2025-7465HIGHTenda FH1201 HTTP POST Request fromRouteStatic buffer overflowEPSS 0.8%CVE-2025-8060HIGHTenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflowEPSS 0.8%CVE-2022-24661—A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vEPSS 0.8%CVE-2025-4835HIGHTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWlanRedirect buffer overflowEPSS 0.8%CVE-2025-4832HIGHTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflowEPSS 0.8%CVE-2025-4834HIGHTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSetLg buffer overflowEPSS 0.8%CVE-2025-4833HIGHTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflowEPSS 0.8%CVE-2025-4831HIGHTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflowEPSS 0.8%