Falhas do tipo CWE-119

3.510 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2025-6334HIGHD-Link DIR-867 Query String strncpy stack-based overflowEPSS 1.0%CVE-2025-7434HIGHTenda FH451 POST Request addressNat fromAddressNat stack-based overflowEPSS 1.0%CVE-2025-7796HIGHTenda FH451 PPTPDClient fromPptpUserAdd stack-based overflowEPSS 1.0%CVE-2025-13191HIGHD-Link DIR-816L soap.cgi soapcgi_main stack-based overflowEPSS 1.0%CVE-2025-13189HIGHD-Link DIR-816L gena.cgi genacgi_main stack-based overflowEPSS 1.0%CVE-2021-3549—An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avEPSS 1.0%CVE-2021-38436HIGHFATEK Automation WinProladderEPSS 1.0%CVE-2021-38442HIGHFATEK Automation WinProladderEPSS 1.0%CVE-2022-47393MEDIUMCODESYS: Multiple products prone to improperly restricted memory operationsEPSS 1.0%CVE-2022-41175—Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted soEPSS 1.0%CVE-2021-3605—There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an aEPSS 1.0%CVE-2021-3746—A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by speciaEPSS 1.0%CVE-2025-15006CRITICALTenda WH450 HTTP Request CheckTools stack-based overflowEPSS 1.0%CVE-2020-36619MEDIUMmultimon-ng demod_flex.c add_ch format stringEPSS 1.0%CVE-2022-3534MEDIUMLinux Kernel libbpf btf_dump.c btf_dump_name_dups use after freeEPSS 1.0%CVE-2025-5865HIGHRT-Thread Parameter lwp_syscall.c sys_select memory corruptionEPSS 1.0%CVE-2025-7549HIGHTenda FH1201 L7Prot frmL7ProtForm stack-based overflowEPSS 1.0%CVE-2025-7422HIGHTenda O3V2 httpd setNetworkService setAutoReboot stack-based overflowEPSS 1.0%CVE-2025-43441MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOSEPSS 1.0%CVE-2025-7597HIGHTenda AX1803 setMacFilterCfg formSetMacFilterCfg stack-based overflowEPSS 1.0%