Falhas do tipo CWE-119

3.239 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2022-30938—A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versEPSS 1.3%CVE-2024-24476HIGHA buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_loEPSS 1.3%CVE-2025-6112HIGHTenda FH1205 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2025-6113HIGHTenda FH1203 AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.3%CVE-2025-4809HIGHTenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflowEPSS 1.3%CVE-2025-5619HIGHTenda CH22 addUserName formaddUserName stack-based overflowEPSS 1.3%CVE-2023-1729—A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.EPSS 1.3%CVE-2021-40400CRITICALAn out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1EPSS 1.3%CVE-2021-20284—A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due EPSS 1.3%CVE-2016-10012HIGHThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds checkEPSS 1.3%CVE-2020-1671HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.EPSS 1.3%CVE-2020-28600HIGHAn out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crEPSS 1.3%CVE-2020-3273HIGHCisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service VulnerabilityEPSS 1.3%CVE-2025-8160HIGHTenda AC20 httpd SetSysTimeCfg buffer overflowEPSS 1.3%CVE-2021-38405HIGHSiemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.3%CVE-2024-11248HIGHTenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowEPSS 1.3%CVE-2023-2794HIGHOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() functionEPSS 1.3%CVE-2020-35527—In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.EPSS 1.2%CVE-2025-11327HIGHTenda AC18 SetUpnpCfg stack-based overflowEPSS 1.2%CVE-2025-11326HIGHTenda AC18 WifiMacFilterSet stack-based overflowEPSS 1.2%