Fallos del tipo CWE-825

100 resultados

Violação de segurança de memória

É a categoria guarda-chuva para falhas que permitem acesso, modificação ou liberação incorreta de memória: buffer overflow, use-after-free, double-free, null pointer dereference, entre outras. O risco é crítico porque o atacante pode executar código arbitrário, vazar dados sensíveis ou travar a aplicação.

Ejemplo

Um programa em C lê dados de rede em um buffer fixo sem validar o tamanho, permitindo que um atacante envie uma carga maior que a capacidade e sobrescreva a pilha — incluindo endereços de retorno — para executar seu próprio código.

Cómo mitigar

Use linguagens memory-safe (Python, Go, Java) ou, em C/C++, valide rigorosamente entrada, use ferramentas como AddressSanitizer e Valgrind, implemente ASLR e DEP no sistema, e revise código com foco em manipulação de ponteiros e alocação dinâmica.

CVE-2026-10671HIGHUser thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`)EPSS 0.2%CVE-2026-6040MEDIUMHeap use-after-free in ODF number-format blank-width parsingEPSS 0.2%CVE-2026-7111HIGHText::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruptionEPSS 0.2%CVE-2025-54770MEDIUMGrub2: use-after-free in net_set_vlanEPSS 0.2%CVE-2026-122192HIGHGuest access to Firecracker process memory after a failed memory discardEPSS 0.2%CVE-2025-54771MEDIUMGrub2: use-after-free in grub_file_close()EPSS 0.2%CVE-2025-61664MEDIUMGrub2: missing unregister call for normal_exit command may lead to use-after-freeEPSS 0.1%CVE-2026-42014MEDIUMGnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinEPSS 0.1%CVE-2026-35094LOWLibinput: libinput: information disclosure via dangling pointer in lua plugin handlingEPSS 0.1%CVE-2026-46176HIGHRDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()EPSS 0.1%CVE-2025-61663MEDIUMGrub2: missing unregister call for normal commands may lead to use-after-freeEPSS 0.1%CVE-2026-45998HIGHrxrpc: Fix potential UAF after skb_unshare() failureEPSS 0.1%CVE-2026-53033HIGHbpf, sockmap: Take state lock for af_unix iterEPSS 0.1%CVE-2026-104039MEDIUMSssd: sssd: denial of service via stale connection state reuse in pam gssapi responderEPSS 0.1%CVE-2026-54778MEDIUMCoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity ResolutionEPSS 0.1%CVE-2026-12610MEDIUMSssd: use-after-free crash in sssd' 'sssd_pam' processEPSS 0.1%CVE-2026-31703HIGHwriteback: Fix use after free in inode_switch_wbs_work_fn()EPSS 0.1%CVE-2026-5165MEDIUMVirtio-win: virtio-win: memory corruption via use-after-free in virtio blk device resetEPSS 0.1%CVE-2021-25443—A use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker.EPSS 0.1%CVE-2026-104034MEDIUMSssd: sssd: denial of service via use-after-free in kcm ticket renewalEPSS 0.1%