Fallos del tipo CWE-825

91 resultados

Violação de segurança de memória

É a categoria guarda-chuva para falhas que permitem acesso, modificação ou liberação incorreta de memória: buffer overflow, use-after-free, double-free, null pointer dereference, entre outras. O risco é crítico porque o atacante pode executar código arbitrário, vazar dados sensíveis ou travar a aplicação.

Ejemplo

Um programa em C lê dados de rede em um buffer fixo sem validar o tamanho, permitindo que um atacante envie uma carga maior que a capacidade e sobrescreva a pilha — incluindo endereços de retorno — para executar seu próprio código.

Cómo mitigar

Use linguagens memory-safe (Python, Go, Java) ou, em C/C++, valide rigorosamente entrada, use ferramentas como AddressSanitizer e Valgrind, implemente ASLR e DEP no sistema, e revise código com foco em manipulação de ponteiros e alocação dinâmica.

CVE-2025-12119MEDIUMBulk write with options may read invalid memoryEPSS 0.2%CVE-2026-34734HIGHHDF5: H5T__conv_struct Use After FreeEPSS 0.2%CVE-2026-76890LOWExpired Pointer Dereference in WiresharkEPSS 0.2%CVE-2026-76891LOWExpired Pointer Dereference in WiresharkEPSS 0.2%CVE-2025-10911MEDIUMLibxslt: use-after-free with key data stored cross-rvtEPSS 0.2%CVE-2024-45105MEDIUMAn internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that couEPSS 0.2%CVE-2026-10671HIGHUser thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`)EPSS 0.2%CVE-2026-7111HIGHText::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruptionEPSS 0.2%CVE-2026-52923HIGHipc: limit next_id allocation to the valid ID rangeEPSS 0.2%CVE-2026-52973HIGHfutex: Drop CLONE_THREAD requirement for private default hash allocEPSS 0.2%CVE-2026-42014MEDIUMGnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinEPSS 0.1%CVE-2025-54770MEDIUMGrub2: use-after-free in net_set_vlanEPSS 0.1%CVE-2025-54771MEDIUMGrub2: use-after-free in grub_file_close()EPSS 0.1%CVE-2026-23868MEDIUMGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The condEPSS 0.1%CVE-2026-52976HIGHdrm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()EPSS 0.1%CVE-2026-46176HIGHRDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()EPSS 0.1%CVE-2025-61664MEDIUMGrub2: missing unregister call for normal_exit command may lead to use-after-freeEPSS 0.1%CVE-2026-35094LOWLibinput: libinput: information disclosure via dangling pointer in lua plugin handlingEPSS 0.1%CVE-2026-52950HIGHdrm/xe/dma-buf: fix UAF with retry loopEPSS 0.1%CVE-2026-23074HIGHnet/sched: Enforce that teql can only be used as root qdiscEPSS 0.1%