Falhas do tipo CWE-119

3.269 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2026-82631LOWvalkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after freeEPSS 0.6%CVE-2023-28638HIGHStack references to locations outside buffers may become invalid if they exist during a GC compaction in SnappierEPSS 0.6%CVE-2026-91086MEDIUMGPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflowEPSS 0.6%CVE-2025-2338MEDIUMtbeu matio io.c strdup_vprintf heap-based overflowEPSS 0.6%CVE-2023-26974MEDIUMIrfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.EPSS 0.6%CVE-2021-1137HIGHCisco SD-WAN vManage Software VulnerabilitiesEPSS 0.5%CVE-2025-15555MEDIUMOpen5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflowEPSS 0.5%CVE-2021-3489HIGHLinux kernel eBPF RINGBUF map oversized allocationEPSS 0.5%CVE-2026-42488HIGHx86: mismatched mapcache metadataEPSS 0.5%CVE-2026-39863HIGHKamailio Core: TCP Data Processing VulnerabilityEPSS 0.5%CVE-2026-54559MEDIUMPocketSphinx: Buffer overflows in language and acoustic model loading codeEPSS 0.5%CVE-2023-43815HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code ExecutionEPSS 0.5%CVE-2024-26149LOWVyper _abi_decode Memory OverflowEPSS 0.5%CVE-2025-15008MEDIUMTenda WH450 HTTP Request L7Port stack-based overflowEPSS 0.5%CVE-2026-82587MEDIUMOpen5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruptionEPSS 0.5%CVE-2017-16231MEDIUMIn PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-rEPSS 0.5%CVE-2022-29486MEDIUMImproper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenEPSS 0.5%CVE-2026-28905HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS EPSS 0.5%CVE-2026-43658HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadEPSS 0.5%CVE-2026-28953HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOSEPSS 0.5%