Fallos del tipo CWE-119

3268 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2025-3372MEDIUMPCMan FTP Server MKDIR Command buffer overflowEPSS 0.8%CVE-2025-4079MEDIUMPCMan FTP Server RENAME Command buffer overflowEPSS 0.8%CVE-2021-20285—A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overfloEPSS 0.8%CVE-2025-3725MEDIUMPCMan FTP Server MIC Command buffer overflowEPSS 0.8%CVE-2025-3374MEDIUMPCMan FTP Server CCC Command buffer overflowEPSS 0.8%CVE-2021-40398HIGHAn out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft ImageGear 19.10. A specially-crafted malformeEPSS 0.7%CVE-2022-24938MEDIUMMalformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlierEPSS 0.7%CVE-2025-0840MEDIUMGNU Binutils objdump.c disassemble_bytes stack-based overflowEPSS 0.7%CVE-2025-14994HIGHTenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflowEPSS 0.7%CVE-2020-3544HIGHCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service VulnerabilityEPSS 0.7%CVE-2026-1143HIGHTOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg buffer overflowEPSS 0.7%CVE-2026-7069HIGHD-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflowEPSS 0.7%CVE-2024-20076HIGHIn Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional eEPSS 0.7%CVE-2024-6236HIGHDenial of ServiceEPSS 0.7%CVE-2024-20077HIGHIn Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional eEPSS 0.7%CVE-2026-16013MEDIUMliftoff-sr CIPster cipepath.cc deserialize_symbolic out-of-boundsEPSS 0.7%CVE-2025-47869CRITICALApache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.EPSS 0.7%CVE-2025-14995HIGHTenda FH1201 SetIpBind sprintf stack-based overflowEPSS 0.7%CVE-2025-14992HIGHTenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflowEPSS 0.7%CVE-2025-13258HIGHTenda AC20 WifiExtraSet buffer overflowEPSS 0.7%