Weaknesses of type CWE-1285

68 results

Validação inadequada de índice, posição ou deslocamento na entrada

A aplicação aceita um índice, posição ou offset fornecido pelo usuário sem validar se ele está dentro dos limites permitidos da estrutura de dados (array, string, buffer, etc.). Isso permite acesso a posições inválidas, causando leitura de dados sensíveis, corrupção de memória ou travamento do programa.

Example

Um API REST que retorna itens de uma lista permite passar um parâmetro ?offset=999999 sem verificar se existe dados naquela posição. Um atacante varre offsets arbitrários para ler dados de outros usuários ou causar erro de negação de serviço.

How to mitigate

Sempre validar que o índice/offset/posição está dentro do intervalo válido (0 até tamanho-1) antes de acessar. Use safeguards na linguagem (bounds checking automático quando disponível) e trate entradas suspeitas como erro, rejeitando-as ou retornando falha explícita.

CVE-2025-8291MEDIUMZIP64 End of Central Directory (EOCD) Locator record offset not checkedEPSS 0.5%CVE-2024-51564HIGHbhyve(8) infinite loop in the hda audio driverEPSS 0.5%CVE-2025-55087MEDIUMIn NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by aEPSS 0.5%CVE-2023-39389—Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homEPSS 0.4%CVE-2023-39388—Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homEPSS 0.4%CVE-2026-53530HIGHratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)EPSS 0.4%CVE-2026-44004HIGHvm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass)EPSS 0.4%CVE-2025-55086MEDIUMIn NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked indEPSS 0.4%CVE-2024-51566MEDIUMbhyve(8) NVMe driver to guest-induced infinite loops.EPSS 0.4%CVE-2026-40886HIGHArgo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controllerEPSS 0.4%CVE-2026-45352MEDIUMcpp-httplib DoS: Negative chunk-size in chunked Transfer-EncodingEPSS 0.3%CVE-2023-36850MEDIUMJunos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.EPSS 0.3%CVE-2026-9100MEDIUMHeap memory out of bounds read and crash in C Driver legacy GridFS file readerEPSS 0.3%CVE-2025-9189HIGHOut Of Bounds Write when parsing a DSB file with Digilent DASYLabEPSS 0.3%CVE-2025-7849HIGHMemory Corruption Issue in NI LabVIEW due to improper error handlingEPSS 0.3%CVE-2018-25232MEDIUMSoftros LAN Messenger 9.2 Denial of Service via Log Files LocationEPSS 0.3%CVE-2025-57778HIGHOut Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLabEPSS 0.3%CVE-2025-57777HIGHOut Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLabEPSS 0.3%CVE-2025-57774HIGHOut Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLabEPSS 0.3%CVE-2025-57776HIGHOut Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLabEPSS 0.3%