Falhas do tipo CWE-119

3.278 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2025-1378MEDIUMradare2 rasm2 rasm2.c memory corruptionEPSS 0.3%CVE-2026-16361CRITICALMemory safety bugs fixed in Thunderbird ESR 140.13EPSS 0.3%CVE-2026-12329MEDIUMMemory safety bug fixed in Thunderbird ESR 140.12EPSS 0.3%CVE-2022-42798MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watEPSS 0.3%CVE-2026-65333MEDIUMThis issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1EPSS 0.3%CVE-2025-53711MEDIUMTP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflowEPSS 0.3%CVE-2025-53714MEDIUMTP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflowEPSS 0.3%CVE-2022-2964—A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contaiEPSS 0.3%CVE-2025-53715MEDIUMTP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflowEPSS 0.3%CVE-2025-53712MEDIUMTP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflowEPSS 0.3%CVE-2025-53713MEDIUMTP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflowEPSS 0.3%CVE-2026-100745MEDIUMEdimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflowEPSS 0.3%CVE-2025-1786MEDIUMrizinorg rizin pdb.c msf_stream_directory_free buffer overflowEPSS 0.3%CVE-2026-20635MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOSEPSS 0.3%CVE-2026-20644MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOSEPSS 0.3%CVE-2026-16364CRITICALIncorrect boundary conditions in the Audio/Video: Playback componentEPSS 0.3%CVE-2012-0952MEDIUMHeap overflow in control device ioctlEPSS 0.3%CVE-2025-1788MEDIUMrizinorg rizin utf8.c rz_utf8_encode heap-based overflowEPSS 0.3%CVE-2025-4092MEDIUMMemory safety bugs fixed in Firefox 138 and Thunderbird 138EPSS 0.3%CVE-2024-0771MEDIUMNsasoft Product Key Explorer Registration memory corruptionEPSS 0.3%