Weaknesses of type CWE-789

336 results

Alocação de memória descontrolada

Ocorre quando a aplicação aloca memória de forma proporcional a entrada do usuário sem validar limites, permitindo que um atacante force a alocação de quantidades excessivas de RAM. Isso causa consumo de memória em massa (DoS) ou até crash da aplicação.

Example

Um servidor web que redimensiona um buffer baseado no header Content-Length enviado pelo cliente sem checá-lo contra um máximo razoável. Um atacante envia Content-Length: 999999999, forçando a alocação de gigabytes de memória instantaneamente e derrubando o serviço.

How to mitigate

Defina e enforce limites máximos de memória por operação — valide tamanhos de entrada contra thresholds conhecidos antes de alocar. Use mecanismos do SO (ulimit, cgroups) para restringir memória por processo como última linha de defesa.

CVE-2026-59204HIGHPillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of serviceEPSS 0.4%CVE-2026-106569MEDIUMImageMagick: Denial of service in ASE decoder because of missing security checksEPSS 0.4%CVE-2026-71218MEDIUMIperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustionEPSS 0.4%CVE-2026-104895HIGHjackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of serviceEPSS 0.4%CVE-2024-37071MEDIUMIBM Db2 denial of serviceEPSS 0.4%CVE-2026-118036HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringEPSS 0.4%CVE-2026-35633MEDIUMOpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error ResponsesEPSS 0.4%CVE-2025-11579MEDIUMDoS via Out Of Memory CrashEPSS 0.4%CVE-2026-106453MEDIUMyawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryErrorEPSS 0.4%CVE-2026-108106HIGHXerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of ServiceEPSS 0.4%CVE-2026-54700MEDIUMConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocationEPSS 0.4%CVE-2026-107223HIGHExcelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the processEPSS 0.4%CVE-2026-33374MEDIUMUnbounded memory allocation in the Prometheus rule conversion APIEPSS 0.4%CVE-2024-2494MEDIUMLibvirt: negative g_new0 length can lead to unbounded memory allocationEPSS 0.4%CVE-2026-119278MEDIUMMariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authenticationEPSS 0.4%CVE-2025-2533MEDIUMIBM Db2 for Linux denial of serviceEPSS 0.4%CVE-2025-2518MEDIUMIBM Db2 denial of serviceEPSS 0.4%CVE-2025-61910HIGHNASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-ServiceEPSS 0.4%CVE-2026-44375HIGHNerdbank.MessagePack: Attacker-controlled stackalloc in DateTime decoding causes process-terminating StackOverflowExceptionEPSS 0.4%CVE-2026-119276MEDIUMMariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packetsEPSS 0.4%