Fallos del tipo CWE-119

3267 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-15431HIGHUTT 进取 512W formFtpServerDirConfig strcpy buffer overflowEPSS 0.8%CVE-2022-43607HIGHAn out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit 530dbEPSS 0.8%CVE-2025-14993HIGHTenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflowEPSS 0.8%CVE-2025-10948HIGHMikroTik RouterOS libjson.so print parse_json_element buffer overflowEPSS 0.8%CVE-2023-34341HIGHAMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locatioEPSS 0.8%CVE-2021-46023HIGHAn Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation faEPSS 0.8%CVE-2025-43343CRITICALThe issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visiEPSS 0.8%CVE-2026-2705MEDIUMOpen Babel MOL2 File atom.h SetFormalCharge out-of-boundsEPSS 0.8%CVE-2025-15090HIGHUTT 进取 512W formConfigNoticeConfig strcpy buffer overflowEPSS 0.8%CVE-2025-12211HIGHTenda O3 setDmzInfo GetValue stack-based overflowEPSS 0.8%CVE-2025-12239HIGHTOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflowEPSS 0.8%CVE-2025-12240HIGHTOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflowEPSS 0.8%CVE-2025-15089HIGHUTT 进取 512W APSecurity strcpy buffer overflowEPSS 0.8%CVE-2022-3974MEDIUMAxiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflowEPSS 0.8%CVE-2025-8958HIGHTenda TX3 fast_setting_wifi_set stack-based overflowEPSS 0.8%CVE-2023-43822HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code ExecutionEPSS 0.8%CVE-2025-5330MEDIUMFreeFloat FTP Server RETR Command buffer overflowEPSS 0.8%CVE-2021-30472—A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possibleEPSS 0.8%CVE-2026-2202HIGHTenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflowEPSS 0.8%CVE-2026-2140HIGHTenda TX9 setMacFilterCfg sub_4223E0 buffer overflowEPSS 0.8%