Falhas do tipo CWE-119

3.266 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2021-32490—A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to appEPSS 0.9%CVE-2022-41175—Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted soEPSS 0.9%CVE-2020-15196HIGHHeap buffer overflow in TensorflowEPSS 0.9%CVE-2025-7094HIGHBelkin F9K1122 webs formBSSetSitesurvey stack-based overflowEPSS 0.9%CVE-2024-24561CRITICALVyper bounds check on built-in `slice()` function can be overflowedEPSS 0.9%CVE-2023-23517HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS EPSS 0.9%CVE-2025-3161HIGHTenda AC10 ShutdownSetAdd stack-based overflowEPSS 0.9%CVE-2025-13189HIGHD-Link DIR-816L gena.cgi genacgi_main stack-based overflowEPSS 0.9%CVE-2025-13191HIGHD-Link DIR-816L soap.cgi soapcgi_main stack-based overflowEPSS 0.9%CVE-2025-8939HIGHTenda AC20 WifiGuestSet buffer overflowEPSS 0.9%CVE-2023-1972MEDIUMA potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.EPSS 0.9%CVE-2025-15428HIGHUTT 进取 512W formRemoteControl strcpy buffer overflowEPSS 0.9%CVE-2025-6940HIGHTOTOLINK A702R HTTP POST Request formParentControl buffer overflowEPSS 0.9%CVE-2025-6510HIGHNetgear EX6100 sub_415EF8 stack-based overflowEPSS 0.9%CVE-2025-43441MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOSEPSS 0.9%CVE-2025-6953HIGHTOTOLINK A3002RU HTTP POST Request formParentControl buffer overflowEPSS 0.9%CVE-2025-15429HIGHUTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflowEPSS 0.9%CVE-2025-6886HIGHTenda AC5 openSchedWifi stack-based overflowEPSS 0.9%CVE-2025-15461HIGHUTT 进取 520W formTaskEdit strcpy buffer overflowEPSS 0.9%CVE-2025-6939HIGHTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%