Weaknesses of type CWE-131

190 results

Cálculo incorreto do tamanho de buffer

O desenvolvedor calcula errado quantos bytes um buffer precisa armazenar, geralmente por erro de lógica matemática, confundindo unidades (bytes vs. elementos) ou não contando caracteres especiais como nulo terminador. Isso abre espaço para estouro de buffer quando dados maiores que o esperado são copiados para esse espaço insuficiente.

Example

Um programa aloca espaço para uma string com `malloc(strlen(entrada))` esquecendo o byte do nulo terminador; quando copia a string com `strcpy()`, escreve além dos limites alocados. Ou calcula `tamanho = num_elementos * 4` quando deveria ser `num_elementos * sizeof(tipo)`.

How to mitigate

Use funções seguras como `snprintf()` ou `strncpy()` que respeitam limites; valide o tamanho final antes de alocar memória; prefira bibliotecas de string seguras; implemente testes unitários que cubram casos-limite (strings vazias, máximo esperado, acima do máximo).

CVE-2025-46723HIGHOpenVM byte decomposition of pc in AUIPC chip can overflowEPSS 0.5%CVE-2022-41886MEDIUMOverflow in `ImageProjectiveTransformV2` in TensorflowEPSS 0.5%CVE-2026-31970HIGHHTSlib BGZF index file reader has a heap buffer overflowEPSS 0.5%CVE-2022-41885MEDIUMOverflow in `FusedResizeAndPadConv2D` in TensorflowEPSS 0.5%CVE-2024-49776MEDIUMA negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service (DoS) via a crafted TS videEPSS 0.5%CVE-2026-102027HIGHJunos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processedEPSS 0.5%CVE-2023-1175HIGHIncorrect Calculation of Buffer Size in vim/vimEPSS 0.4%CVE-2025-30334HIGHOpenBSD wg(4) kernel crashEPSS 0.4%CVE-2024-8361HIGHDoS caused due to wrong hash length returned for SHA2/224 algorithmEPSS 0.4%CVE-2022-4378HIGHA stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This fEPSS 0.4%CVE-2025-46393LOWIn multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels iEPSS 0.4%CVE-2026-112709CRITICALFireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionEPSS 0.4%CVE-2026-112710CRITICALFireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionEPSS 0.4%CVE-2026-26200HIGHHDF5 Affected by H5T__conv_struct_opt Heap Buffer OverflowEPSS 0.4%CVE-2020-14385MEDIUMA flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid,EPSS 0.4%CVE-2026-88355HIGHAn incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(). For arity-0 expression nodes, including EPSS 0.4%CVE-2026-54696LOWRuby JSON: JSON generator heap buffer overflow when streaming to an IOEPSS 0.4%CVE-2026-116788HIGHFreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decodingEPSS 0.4%CVE-2026-33984HIGHFreeRDP: ClearCodec resize_vbar_entry() Heap OOB WriteEPSS 0.4%CVE-2026-41197CRITICALBrillig: Heap corruption in foreign call results with nested tuple arraysEPSS 0.4%