Falhas do tipo CWE-119

3.266 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2018-17907—When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can fEPSS 0.9%CVE-2025-6939HIGHTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%CVE-2020-36619MEDIUMmultimon-ng demod_flex.c add_ch format stringEPSS 0.9%CVE-2023-29420MEDIUMAn issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.EPSS 0.9%CVE-2026-4254CRITICALTenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflowEPSS 0.9%CVE-2022-39974HIGHWASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.EPSS 0.9%CVE-2025-10779HIGHD-Link DCS-935L HNAP1 sub_402280 stack-based overflowEPSS 0.9%CVE-2023-4967HIGHDenial of serviceEPSS 0.9%CVE-2025-15179HIGHTenda WH450 qossetting stack-based overflowEPSS 0.9%CVE-2023-2970LOWMindSpore json_helper.cc UpdateArray memory corruptionEPSS 0.9%CVE-2022-26772HIGHA memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be abEPSS 0.9%CVE-2022-4046HIGHCODESYS: Improper memory restrictions fro CODESYS ControlEPSS 0.9%CVE-2025-0574HIGHSante PACS Server URL path Memory Corruption Denial-of-Service VulnerabilityEPSS 0.9%CVE-2026-2853HIGHD-Link DWR-M960 System Log Configuration Endpoint formSysLog sub_462E14 stack-based overflowEPSS 0.9%CVE-2022-31747CRITICALMozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 andEPSS 0.9%CVE-2026-2857HIGHD-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub_423E00 stack-based overflowEPSS 0.9%CVE-2025-13288HIGHTenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflowEPSS 0.9%CVE-2025-7194HIGHD-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflowEPSS 0.9%CVE-2025-11408HIGHD-Link DI-7001 MINI dbsrv.asp buffer overflowEPSS 0.9%CVE-2025-9813HIGHTenda CH22 SetSambaConf formSetSambaConf buffer overflowEPSS 0.9%