Weaknesses of type CWE-805

57 results

Acesso a buffer com tamanho incorreto

Ocorre quando o código acessa um buffer (lê ou escreve) usando um tamanho que não corresponde ao tamanho real alocado ou esperado. Isso permite leitura ou escrita além dos limites, causando corrupção de memória, vazamento de dados ou execução de código arbitrário.

Example

Uma função recebe um tamanho de dado como parâmetro e usa esse valor diretamente em memcpy() sem validar se ele não ultrapassa o tamanho real do buffer. Um atacante passa um tamanho maior, provocando overflow e sobrescrita de memória adjacente.

How to mitigate

Sempre validar e limitar o tamanho de acesso ao menor entre o tamanho solicitado e o tamanho real do buffer. Use APIs seguras como strncpy() em vez de strcpy(), e implemente verificações explícitas de limites antes de qualquer leitura ou escrita.

CVE-2025-20202HIGHA vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service EPSS 0.2%CVE-2024-3933MEDIUMEclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a bufferEPSS 0.2%CVE-2026-15028LOWLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerEPSS 0.2%CVE-2024-0131MEDIUMNVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read  a buffer with an inEPSS 0.2%CVE-2026-20290MEDIUMCisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityEPSS 0.2%CVE-2022-34399MEDIUM Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potenEPSS 0.2%CVE-2025-7048MEDIUMOn affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption oEPSS 0.2%CVE-2026-20010HIGHCisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service VulnerabilityEPSS 0.2%CVE-2025-36463HIGHDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityEPSS 0.2%CVE-2025-36460HIGHDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityEPSS 0.2%CVE-2026-20033HIGHCisco NX-OS Software Denial of Service VulnerabilityEPSS 0.2%CVE-2026-1766MEDIUMLocalsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.EPSS 0.2%CVE-2025-38743HIGHDell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privilEPSS 0.1%CVE-2026-53016HIGHcrypto: ccp - copy IV using skcipher ivsizeEPSS 0.1%CVE-2025-36462HIGHDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityEPSS 0.1%CVE-2025-36461HIGHDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityEPSS 0.1%CVE-2026-6245MEDIUMSssd: out-of-bounds read in the sssdEPSS 0.1%