Cwe 119

CWE-119: メモリの境界外操作 🧬 CWE 関連 3,182

slug: cwe-119

解説

CWE-119は「C/C++など低レベル言語で、配列の確保された範囲外にデータを読み書きしてしまう欠陥」のことです。バッファオーバーフローやヒープオーバーフローと呼ばれる古典的な脆弱性で、攻撃者はこれを使って任意のコード実行を狙います。ブラウザ・OS・ファームウェアなど低レベルなシステムで頻発します。

📌 具体例

Heartbleed (CVE-2014-0160): OpenSSL の境界外読み取り脆弱性で、サーバーのメモリから秘密鍵やパスワードが盗み見えるようになった。世界中のWebサイトの約1/3が影響を受けた。

🔗 関連リンク

MITRE CWE-119 公式ページ ↗

🔖 関連タグ

CWE-79: クロスサイトスクリプティング (XSS)8678 CWE-89: SQLインジェクション4152 Cwe 8624031 Cwe 2844027 CWE-416: 解放後使用 (Use-After-Free)3896 Cwe 2003138 Cwe 1253115 CWE-20: 入力検証の不備2856 CWE-22: パストラバーサル2769 CWE-787: 境界外書き込み2517 CWE-78: OSコマンドインジェクション2021 CWE-94: コードインジェクション1870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 このタグに関連する脆弱性 3,185

ID	タイトル	重要度	検知
CVE-2026-86165	A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function...	Critical	1ヶ月前
CVE-2026-85522	A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this...	Medium	1ヶ月前
CVE-2026-85110	A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of...	High	1ヶ月前
CVE-2026-85109	A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin...	Critical	1ヶ月前
CVE-2026-85031	A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of...	Critical	1ヶ月前
CVE-2026-76756	Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: ..	Medium	1ヶ月前
CVE-2026-76755	Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: ..	Medium	1ヶ月前
CVE-2026-76757	Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: ..	Medium	1ヶ月前
CVE-2026-9637	A denial-of-service security issue exists in the affected Logix platforms listed in the table...		1ヶ月前
CVE-2026-84145	Mozilla Firefox にバッファオーバーフロー (CVE-2026-84145)	High	1ヶ月前
CVE-2026-84142	Mozilla Firefox にバッファオーバーフロー (CVE-2026-84142)	Critical	1ヶ月前
CVE-2026-84143	Mozilla Firefox にバッファオーバーフロー (CVE-2026-84143)	Critical	1ヶ月前
CVE-2026-84144	Mozilla Firefox にバッファオーバーフロー (CVE-2026-84144)	High	1ヶ月前
CVE-2026-82820	A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the...	Medium	1ヶ月前
CVE-2026-82680	A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the...	High	1ヶ月前
CVE-2026-82677	A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function...	Low	1ヶ月前
CVE-2026-82631	A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the...	Low	1ヶ月前
CVE-2026-82623	A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the...	Medium	1ヶ月前
CVE-2026-82619	A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the...	Medium	1ヶ月前
CVE-2026-82616	A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function...	Critical	1ヶ月前
CVE-2026-82618	A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the...	Medium	1ヶ月前
CVE-2026-82608	A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function...	High	1ヶ月前
CVE-2026-82596	A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the...	Low	1ヶ月前
CVE-2026-82591	A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The...	Medium	1ヶ月前
CVE-2026-82592	A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of...	Critical	1ヶ月前
CVE-2026-82593	A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file ...	Critical	1ヶ月前
CVE-2026-82587	A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function...	Medium	1ヶ月前
CVE-2026-82542	A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function...	Critical	1ヶ月前
CVE-2026-82539	A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function...	Critical	1ヶ月前
CVE-2026-82479	A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the...	Medium	1ヶ月前