Fallos del tipo CWE-119

3268 resultados

Corrupção de memória genérica

Fraqueza genérica que descreve quando software escreve dados fora dos limites esperados de um buffer ou estrutura de memória, sobrescrevendo dados adjacentes. Permite ao atacante corromper dados críticos, executar código arbitrário ou derrubar a aplicação.

Ejemplo

Um programa C que copia uma string do usuário para um array fixo sem validar comprimento: strcpy(buffer, user_input) em um buffer de 64 bytes, quando o input tem 200 caracteres. Os dados transbordados sobrescrevem variáveis, ponteiros ou endereços de retorno na pilha.

Cómo mitigar

Use funções seguras de cópia (strncpy, strlcpy, memcpy com tamanho validado), implemente validação de entrada e comprimento antes de qualquer operação de escrita em buffer, e ative proteções de compilador como stack canaries e ASLR. Em linguagens modernas (Rust, Go), o gerenciamento automático de memória elimina essa classe de bugs.

CVE-2023-27284HIGHIBM Aspera code executionEPSS 0.7%CVE-2022-31748CRITICALMozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs prEPSS 0.7%CVE-2025-12274HIGHTenda CH22 P2pListFilter fromP2pListFilter buffer overflowEPSS 0.7%CVE-2026-96891CRITICALD-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds writeEPSS 0.7%CVE-2022-31740HIGHOn arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitEPSS 0.7%CVE-2025-31204HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOEPSS 0.7%CVE-2026-64726CRITICALThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOEPSS 0.7%CVE-2023-5130HIGHDelta Electronics WPLSoft Buffer-OverflowEPSS 0.6%CVE-2024-21916HIGHRockwell Automation Denial-of-service Vulnerability in ICE1 ControllerEPSS 0.6%CVE-2026-2139HIGHTenda TX9 fast_setting_wifi_set sub_432580 buffer overflowEPSS 0.6%CVE-2025-6091HIGHH3C GR-3000AX aspForm UpdateIpv6Params buffer overflowEPSS 0.6%CVE-2014-2355—GE Proficy HMI/SCADA CIMPLICITY CimViewEPSS 0.6%CVE-2025-6090HIGHH3C GR-5400AX aspForm UpdateIpv6params buffer overflowEPSS 0.6%CVE-2022-24322MEDIUMA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of comEPSS 0.6%CVE-2026-2086HIGHUTT HiPER 810G Management formFireWall strcpy buffer overflowEPSS 0.6%CVE-2026-19968MEDIUMOpen Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflowEPSS 0.6%CVE-2026-91087MEDIUMGPAC Compositor media_object.c gf_mo_get_od_id use after freeEPSS 0.6%CVE-2026-13592MEDIUMliftoff-sr CIPster EtherNet IP Message append out-of-bounds writeEPSS 0.6%CVE-2024-45810MEDIUMEnvoy crashes for LocalReply in http async clientEPSS 0.6%CVE-2023-24817HIGHRIOT-OS vulnerable to Out of Bounds write in routing with SRHEPSS 0.6%