Fallos del tipo CWE-131

190 resultados

Cálculo Incorreto de Tamanho de Buffer

Ocorre quando o desenvolvedor calcula de forma errada o tamanho de memória necessária para um buffer, resultando em alocação insuficiente. Isso permite que dados escritos ultrapassem o limite do buffer, causando corrupção de memória, crash ou execução de código arbitrário.

Ejemplo

Um programa recebe uma string de tamanho desconhecido e aloca buffer com `malloc(strlen(input))` em vez de `malloc(strlen(input) + 1)`. O espaço para o terminador nulo é esquecido, e a cópia transborda o buffer adjacente.

Cómo mitigar

Use funções seguras como `snprintf()` ou `strncpy()` que aceitam o tamanho máximo como parâmetro. Ao calcular tamanho, sempre considere: comprimento real dos dados + espaço para terminadores + padding necessário. Automatize com ferramentas estáticas (AddressSanitizer, Valgrind) em testes para detectar transbordamentos.

CVE-2026-1949CRITICALIncorrect calculation of buffer size on the stack in AS320TEPSS 0.6%CVE-2026-2050HIGHGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-75093MEDIUMsonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer sizeEPSS 0.6%CVE-2025-43965LOWIn MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.EPSS 0.6%CVE-2024-5000HIGHCODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA productsEPSS 0.6%CVE-2026-27820LOWzlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruptionEPSS 0.6%CVE-2023-52557HIGHOpenBSD 7.3 invalid l2tp message npppd crashEPSS 0.6%CVE-2026-116570HIGHFreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationEPSS 0.6%CVE-2025-66216CRITICALAIS-catcher has a Buffer Overflow vulnerability in `AIS::Message` leading to DoS/RCEEPSS 0.5%CVE-2026-29645HIGHNEMU (OpenXiangShan/NEMU) before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector (RVV) decoder. The decodeEPSS 0.5%CVE-2026-92156MEDIUMF´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridgeEPSS 0.5%CVE-2026-22590CRITICALFast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessageEPSS 0.5%CVE-2026-55827HIGHFreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decodeEPSS 0.5%CVE-2024-23805HIGHF5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerabilityEPSS 0.5%CVE-2024-45287CRITICALMultiple vulnerabilities in libnvEPSS 0.5%CVE-2026-31478CRITICALksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()EPSS 0.5%CVE-2026-44254MEDIUMWazuh: Stack Out-of-Bounds Write in remoted Decompression PathEPSS 0.5%CVE-2022-41907MEDIUMOverflow in `ResizeNearestNeighborGrad` in TensorflowEPSS 0.5%CVE-2022-41887MEDIUMOverflow in `tf.keras.losses.poisson` in TensorflowEPSS 0.5%CVE-2026-1188MEDIUMIn the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor featurEPSS 0.5%