Falhas do tipo CWE-119

3.288 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2025-7318HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-25585HIGHiccDEV vulnerable to OOB in CIccXform3DLut::Apply()EPSS 0.2%CVE-2026-8261MEDIUMSquirrel sqobject.cpp Load heap-based overflowEPSS 0.2%CVE-2024-27791MEDIUMThe issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey EPSS 0.2%CVE-2018-25109MEDIUMNintendo Animal Crossing Letter Trigram ac-exploit-gc memory corruptionEPSS 0.2%CVE-2025-15570MEDIUMckolivas lrzip stream.c lzma_decompress_buf use after freeEPSS 0.2%CVE-2025-7320HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7323HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-65396MEDIUMA vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hiEPSS 0.2%CVE-2024-9489HIGHAutodesk AutoCAD DWG File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2026-90801MEDIUMGNU Binutils ld cache.c cache_bwrite buffer overflowEPSS 0.2%CVE-2024-8599HIGHAutodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2025-15412MEDIUMWebAssembly wabt wasm-decompile VarName out-of-boundsEPSS 0.2%CVE-2024-8598HIGHAutodesk AutoCAD ACTranslators STEP File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2025-15411MEDIUMWebAssembly wabt wasm-decompile InsertNode memory corruptionEPSS 0.2%CVE-2024-8597HIGHAutodesk AutoCAD STEP File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2024-8600HIGHA maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A maliEPSS 0.2%CVE-2022-34412HIGH Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious userEPSS 0.2%CVE-2026-2660MEDIUMFascinatedBox lily lily_symtab.c shorthash_for_name use after freeEPSS 0.2%CVE-2026-3145MEDIUMlibvips matrixload.c vips_foreign_load_matrix_header memory corruptionEPSS 0.2%