Weaknesses of type CWE-409

190 results

Manipulação inadequada de dados altamente compactados (amplificação de dados)

Ocorre quando uma aplicação processa dados compactados (ZIP, GZIP, etc.) sem validar ou limitar o tamanho descompactado, permitindo que um arquivo pequeno se expanda para gigabytes na memória. Um atacante envia um arquivo malicioso que causa consumo excessivo de CPU, memória ou disco, derribando o serviço.

Example

Um servidor aceita uploads de arquivos compactados para backup sem verificar o tamanho final. Um arquivo de 10 MB compactado se descompacta para 10 GB, esgotando a memória disponível e travando o servidor. Esse é o ataque 'zip bomb' clássico.

How to mitigate

Estabeleça limites: defina um tamanho máximo aceitável para dados descompactados antes de processar, implemente timeouts de descompactação, e monitore consumo de memória durante a expansão. Valide a integridade e origem dos arquivos compactados recebidos.

CVE-2026-22870HIGHGuardDog Zip Bomb Vulnerability in safe_extract() Allows DoSEPSS 0.5%CVE-2026-43970HIGHDecompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY FrameEPSS 0.5%CVE-2026-18929MEDIUMResource Exhaustion in CarboneEPSS 0.5%CVE-2026-44981HIGHCrowdSec LAPI: Denial of Service via Unbounded Gzip DecompressionEPSS 0.5%CVE-2026-109229HIGHSGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessorEPSS 0.5%CVE-2026-112892HIGHPillow: MSP RLE decoder expands a tiny file into unbounded memoryEPSS 0.5%CVE-2026-114136HIGHDjango REST framework: JSONParser applies an attacker-named codec to the request streamEPSS 0.5%CVE-2026-78594MEDIUMImproper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of ServiceEPSS 0.5%CVE-2026-118761HIGHKubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memoryEPSS 0.5%CVE-2026-54278MEDIUMAIOHTTP: Unread Compressed Request Bodies Bypass client_max_size During CleanupEPSS 0.5%CVE-2026-47321HIGHApache MINA: Unbounded Decompression Amplification DoS in Zlib.inflateEPSS 0.5%CVE-2026-48044HIGHEnvoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosionEPSS 0.5%CVE-2026-53524MEDIUMWeeChat has a Decompression Bomb in Relay WebSocket (DoS)EPSS 0.5%CVE-2026-44162LOWfluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`EPSS 0.5%CVE-2026-27809MEDIUMpsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gapsEPSS 0.5%CVE-2024-1947MEDIUMImproper Handling of Highly Compressed Data (Data Amplification) in GitLabEPSS 0.5%CVE-2026-28435HIGHPayload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplibEPSS 0.5%CVE-2026-72628MEDIUMImproper Handling of Highly Compressed Data in Kibana Leading to Denial of ServiceEPSS 0.5%CVE-2026-8814MEDIUMVersions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to dEPSS 0.5%CVE-2026-59932HIGHPhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustionEPSS 0.5%