Weaknesses of type CWE-354

151 results

Validação inadequada de valor de verificação de integridade

Ocorre quando o software recebe um valor de checksum, hash ou assinatura para verificar a integridade de dados, mas não valida esse valor corretamente antes de confiar nos dados. Um atacante pode modificar tanto os dados quanto o mecanismo de verificação, ou fornecer um valor falso, e o software aceita sem questionar.

Example

Um servidor recebe um arquivo com um MD5 anexado. Em vez de recalcular o hash e comparar, o código apenas verifica se o campo 'checksum' existe. Um atacante modifica o arquivo, recalcula o MD5 falsificado, envia ambos, e o servidor aceita o arquivo corrompido como válido.

How to mitigate

Sempre recalcule o hash/checksum do dado recebido e compare com o valor fornecido usando comparação de tempo constante. Para dados críticos, use HMAC com chave secreta ou assinatura criptográfica (RSA, ECDSA) em vez de apenas hash simples. Documente qual algoritmo e qual chave devem ser usados, e rejeite qualquer discrepância.

CVE-2026-31839HIGHStriae has a hash validation utility vulnerabilityEPSS 0.1%CVE-2026-118776LOWForge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryptionEPSS 0.1%CVE-2026-120423MEDIUMundici vulnerable to Subresource Integrity bypass via whitespace in integrity metadataEPSS 0.1%CVE-2022-39845MEDIUMImproper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitraryEPSS 0.1%CVE-2023-36537HIGHImproper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of priEPSS 0.1%CVE-2024-32883HIGHMCUboot Injection attack of unprotected TLV valuesEPSS 0.1%CVE-2026-118782HIGHForge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countEPSS 0.1%CVE-2026-56416MEDIUMPossible heap buffer overflow when validator canonicalizes RDATA that contains domain nameEPSS 0.1%CVE-2024-46992HIGHElectron ASAR Integrity bypass by just modifying the contentEPSS 0.1%CVE-2025-4616LOWPrisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma BrowserEPSS 0.1%CVE-2026-65625MEDIUMAttacker-controlled AES-GCM authentication tag length allows tag forgery in joseEPSS 0.1%CVE-2026-32303HIGHCryptomator: Tampered vault configuration allows MITM attack on Hub APIEPSS 0.1%CVE-2026-5504MEDIUMPKCS7 CBC Padding Oracle — Plaintext RecoveryEPSS 0.1%CVE-2026-54578LOWmport verify can compare stale checksum data after hashing failuresEPSS 0.1%CVE-2025-33193MEDIUMNVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity. A successfEPSS 0.1%CVE-2026-71888HIGHCMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentEPSS 0.1%CVE-2026-106434MEDIUMUnrecognized payload acceptance in explicit decryption in MongoDB libmongocryptEPSS 0.1%CVE-2026-35501LOWBypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.EPSS 0.1%CVE-2024-23461MEDIUMZCC macOS Upgrade ZIP Bomb DoSEPSS 0.1%CVE-2023-41970MEDIUMRepair App local code execution with arbitrary privilegesEPSS 0.1%