Fallos del tipo CWE-825

100 resultados

Violação de segurança de memória

É a categoria guarda-chuva para falhas que permitem acesso, modificação ou liberação incorreta de memória: buffer overflow, use-after-free, double-free, null pointer dereference, entre outras. O risco é crítico porque o atacante pode executar código arbitrário, vazar dados sensíveis ou travar a aplicação.

Ejemplo

Um programa em C lê dados de rede em um buffer fixo sem validar o tamanho, permitindo que um atacante envie uma carga maior que a capacidade e sobrescreva a pilha — incluindo endereços de retorno — para executar seu próprio código.

Cómo mitigar

Use linguagens memory-safe (Python, Go, Java) ou, em C/C++, valide rigorosamente entrada, use ferramentas como AddressSanitizer e Valgrind, implemente ASLR e DEP no sistema, e revise código com foco em manipulação de ponteiros e alocação dinâmica.

CVE-2026-41216HIGHAn invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .pEPSS 0.3%CVE-2026-34001HIGHXorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionEPSS 0.3%CVE-2025-30653MEDIUMJunos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crashEPSS 0.3%CVE-2026-76891LOWExpired Pointer Dereference in WiresharkEPSS 0.2%CVE-2026-76890LOWExpired Pointer Dereference in WiresharkEPSS 0.2%CVE-2026-52923HIGHipc: limit next_id allocation to the valid ID rangeEPSS 0.2%CVE-2025-12119MEDIUMBulk write with options may read invalid memoryEPSS 0.2%CVE-2026-46166HIGHwifi: mac80211: use safe list iteration in radar detect workEPSS 0.2%CVE-2026-34734HIGHHDF5: H5T__conv_struct Use After FreeEPSS 0.2%CVE-2026-23074HIGHnet/sched: Enforce that teql can only be used as root qdiscEPSS 0.2%CVE-2026-52973HIGHfutex: Drop CLONE_THREAD requirement for private default hash allocEPSS 0.2%CVE-2026-52976HIGHdrm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()EPSS 0.2%CVE-2026-19939MEDIUMBluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruptionEPSS 0.2%CVE-2026-52950HIGHdrm/xe/dma-buf: fix UAF with retry loopEPSS 0.2%CVE-2026-52952HIGHiommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to resetEPSS 0.2%CVE-2026-53085HIGHbpf: fix mm lifecycle in open-coded task_vma iteratorEPSS 0.2%CVE-2026-23868MEDIUMGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The condEPSS 0.2%CVE-2025-10911MEDIUMLibxslt: use-after-free with key data stored cross-rvtEPSS 0.2%CVE-2024-45105MEDIUMAn internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that couEPSS 0.2%CVE-2026-86845MEDIUMDpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupEPSS 0.2%