Falhas do tipo CWE-119

3.043 resultados

Corrupção de Memória Genérica

É uma categoria abrangente que descreve qualquer acesso indevido à memória — escrever fora dos limites de um buffer, ler dados não inicializados, ou manipular ponteiros inválidos. O risco é grave: permite execução de código arbitrário, travamento da aplicação ou exposição de dados sensíveis.

Exemplo

Um programa em C copia dados do usuário para um array sem validar o tamanho (strcpy em vez de strncpy). Um atacante envia uma string maior que o buffer, sobrescrevendo dados adjacentes ou até o endereço de retorno da função, permitindo injetar código malicioso.

Como mitigar

Use funções seguras (strncpy, snprintf, memmove com limites explícitos), valide e sanitize toda entrada antes de copiar, ative canários de pilha e ASLR no SO, e aplique sanitizadores (ASAN, UBSAN) durante desenvolvimento e testes. Em linguagens seguras (Rust, Python) o problema é praticamente eliminado.

CVE-2018-4233HIGHAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on WindoEPSS 53.8%CVE-2011-1889CRITICALThe NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execuEPSS 48.4%KEVCVE-2025-68615CRITICALNet-SNMP snmptrapd crashEPSS 43.3%CVE-2017-6737HIGHA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rEPSS 42.6%KEVCVE-2020-3331CRITICALCisco RV110W and RV215W Series Routers Arbitrary Code Execution VulnerabilityEPSS 41.7%CVE-2013-3660HIGHThe EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, EPSS 39.6%KEVCVE-2012-6438HIGHRockwell Automation ControlLogix PLC Improper Input ValidationEPSS 33.0%CVE-2012-6436HIGHRockwell Automation ControlLogix PLC Improper Input ValidationEPSS 33.0%CVE-2017-3823—An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on MEPSS 27.2%CVE-2014-3931CRITICALfastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruEPSS 26.6%KEVCVE-2019-1913CRITICALCisco Small Business 220 Series Smart Switches Remote Code Execution VulnerabilitiesEPSS 25.9%CVE-2025-14174HIGHOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memoEPSS 22.7%KEVCVE-2017-6742HIGHA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rEPSS 21.4%KEVCVE-2023-3824CRITICALBuffer overflow and overread in phar_dir_read()EPSS 21.1%CVE-2016-0778HIGHThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certaEPSS 20.9%CVE-2025-31200CRITICALA memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15EPSS 19.7%KEVCVE-2025-7775CRITICALMemory overflow vulnerability leading to Remote Code Execution and/or Denial of ServiceEPSS 19.6%KEVCVE-2024-0088MEDIUMCVEEPSS 18.9%CVE-2017-0022MEDIUMMicrosoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 EPSS 18.1%KEVCVE-2025-1340HIGHTOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflowEPSS 16.7%