Falhas do tipo CWE-119

3.278 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2025-4892MEDIUMcode-projects Police Station Management System Delete Record source.cpp remove stack-based overflowEPSS 0.4%CVE-2025-4029MEDIUMcode-projects Personal Diary Management System New Record addrecord stack-based overflowEPSS 0.4%CVE-2025-43504MEDIUMA buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position maEPSS 0.3%CVE-2025-4063MEDIUMcode-projects Student Information Management System cancel stack-based overflowEPSS 0.3%CVE-2023-3576MEDIUMLibtiff: memory leak in tiffcrop.cEPSS 0.3%CVE-2025-4061MEDIUMcode-projects Clothing Store Management System add_item stack-based overflowEPSS 0.3%CVE-2025-1587MEDIUMSourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflowEPSS 0.3%CVE-2025-4062MEDIUMcode-projects Theater Seat Booking System cancel stack-based overflowEPSS 0.3%CVE-2024-2929HIGHRockwell Automation Arena Simulation Vulnerable To Memory CorruptionEPSS 0.3%CVE-2023-23457MEDIUMUpx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cppEPSS 0.3%CVE-2024-7024CRITICALInappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escapeEPSS 0.3%CVE-2025-1372MEDIUMGNU elfutils eu-readelf readelf.c print_string_section buffer overflowEPSS 0.3%CVE-2025-4891MEDIUMcode-projects Police Station Management System Display Record source.cpp display buffer overflowEPSS 0.3%CVE-2025-4499MEDIUMcode-projects Simple Hospital Management System Add Information add stack-based overflowEPSS 0.3%CVE-2025-4889MEDIUMcode-projects Tourism Management System User Registration AddUser buffer overflowEPSS 0.3%CVE-2025-4498MEDIUMcode-projects Simple Bus Reservation System Install Bus install stack-based overflowEPSS 0.3%CVE-2025-4500MEDIUMcode-projects Hotel Management System Edit Room edit stack-based overflowEPSS 0.3%CVE-2024-11575HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.3%CVE-2019-1630MEDIUMCisco Integrated Management Controller Denial of Service VulnerabilityEPSS 0.3%CVE-2025-4888MEDIUMcode-projects Pharmacy Management System Add Order Details take_order buffer overflowEPSS 0.3%