Falhas do tipo CWE-119

3.508 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2025-4343HIGHD-Link DIR-600L formEasySetupWizard buffer overflowEPSS 1.3%CVE-2023-1729—A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.EPSS 1.3%CVE-2021-40400CRITICALAn out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1EPSS 1.3%CVE-2021-20284—A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due EPSS 1.3%CVE-2025-7837HIGHTOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflowEPSS 1.3%CVE-2016-10012HIGHThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds checkEPSS 1.3%CVE-2025-7912HIGHTOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflowEPSS 1.3%CVE-2025-7532HIGHTenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.3%CVE-2025-8245HIGHTOTOLINK X15 HTTP POST Request formMultiAPVLAN buffer overflowEPSS 1.3%CVE-2025-7855HIGHTenda FH451 qossetting fromqossetting stack-based overflowEPSS 1.3%CVE-2020-1671HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.EPSS 1.3%CVE-2020-3273HIGHCisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service VulnerabilityEPSS 1.3%CVE-2020-28600HIGHAn out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crEPSS 1.3%CVE-2025-11326HIGHTenda AC18 WifiMacFilterSet stack-based overflowEPSS 1.3%CVE-2025-11327HIGHTenda AC18 SetUpnpCfg stack-based overflowEPSS 1.3%CVE-2020-11046MEDIUMImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPEPSS 1.3%CVE-2021-38405HIGHSiemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.3%CVE-2025-43186CRITICALThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.EPSS 1.3%CVE-2025-6370HIGHD-Link DIR-619L formWlanGuestSetup stack-based overflowEPSS 1.3%CVE-2025-6368HIGHD-Link DIR-619L formSetEmail stack-based overflowEPSS 1.3%