Falhas do tipo CWE-119

3.263 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2020-3573HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 2.8%CVE-2018-10490—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interactiEPSS 2.7%CVE-2026-2910HIGHTenda HG9 formPing6 stack-based overflowEPSS 2.7%CVE-2020-15254HIGHUndefined Behavior in bounded Crossbeam channelEPSS 2.7%CVE-2020-26243HIGHMemory leak in nanopbEPSS 2.7%CVE-2020-3603HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 2.6%CVE-2020-1574MEDIUMMicrosoft Windows Codecs Library Remote Code Execution VulnerabilityEPSS 2.6%CVE-2020-3604HIGHCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesEPSS 2.6%CVE-2026-4906HIGHTenda AC5 POST Request WizardHandle decodePwd stack-based overflowEPSS 2.6%CVE-2021-21898HIGHA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specEPSS 2.6%CVE-2017-2668MEDIUM389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled.EPSS 2.6%CVE-2020-3269HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface VulnerabilitiesEPSS 2.6%CVE-2020-3268HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface VulnerabilitiesEPSS 2.6%CVE-2017-12280—A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco WirelessEPSS 2.6%CVE-2025-5630CRITICALD-Link DIR-816 form2lansetup.cgi stack-based overflowEPSS 2.6%CVE-2025-4442HIGHD-Link DIR-605L formSetWAN_Wizard55 buffer overflowEPSS 2.6%CVE-2025-4441HIGHD-Link DIR-605L formSetWAN_Wizard534 buffer overflowEPSS 2.6%CVE-2026-3808HIGHTenda FH1202 webtypelibrary formWebTypeLibrary stack-based overflowEPSS 2.6%CVE-2020-12038—Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6EPSS 2.5%CVE-2025-5624CRITICALD-Link DIR-816 QoSPortSetup stack-based overflowEPSS 2.5%