Falhas do tipo CWE-119

3.510 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2024-24561CRITICALVyper bounds check on built-in `slice()` function can be overflowedEPSS 0.9%CVE-2025-5629HIGHTenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflowEPSS 0.9%CVE-2023-23517HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS EPSS 0.9%CVE-2025-9791HIGHTenda AC20 fromAdvSetMacMtuWan stack-based overflowEPSS 0.9%CVE-2025-24797CRITICALMeshtastic incorrectly hands malformed packets leads to controlled buffer overflowEPSS 0.9%CVE-2025-9303HIGHTOTOLINK A720R cstecgi.cgi setParentalRules buffer overflowEPSS 0.9%CVE-2025-5869HIGHRT-Thread lwp_syscall.c sys_recvfrom memory corruptionEPSS 0.9%CVE-2026-64726CRITICALThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOEPSS 0.9%CVE-2025-12622HIGHTenda AC10 SysRunCmd formSysRunCmd buffer overflowEPSS 0.9%CVE-2023-1972MEDIUMA potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.EPSS 0.9%CVE-2018-17907—When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can fEPSS 0.9%CVE-2022-4603MEDIUMppp pppdump pppdump.c dumpppp array indexEPSS 0.9%CVE-2025-4896HIGHTenda AC10 UserCongratulationsExec buffer overflowEPSS 0.9%CVE-2025-11408HIGHD-Link DI-7001 MINI dbsrv.asp buffer overflowEPSS 0.9%CVE-2025-13190HIGHD-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflowEPSS 0.9%CVE-2021-32492—A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may leaEPSS 0.9%CVE-2023-29420MEDIUMAn issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.EPSS 0.9%CVE-2025-9748HIGHTenda CH22 httpd IPSECsave fromIpsecitem stack-based overflowEPSS 0.9%CVE-2025-10756HIGHUTT HiPER 840G getOneApConfTempEntry buffer overflowEPSS 0.9%CVE-2024-12988MEDIUMNetgear R6900P/R7000P HTTP Header sub_16C4C buffer overflowEPSS 0.9%