Fallos del tipo CWE-409

190 resultados

Tratamento inadequado de dados altamente comprimidos (amplificação de dados)

Ocorre quando a aplicação processa dados comprimidos sem validar ou limitar o tamanho descompactado, permitindo que um arquivo pequeno se expanda para gigabytes na memória. Um atacante envia um arquivo comprimido malicioso que, ao ser descompactado, consome recursos excessivos e derruba o serviço (DoS) ou causa crash.

Ejemplo

Um servidor de upload que aceita arquivos ZIP sem verificar o tamanho do conteúdo descompactado recebe um arquivo de 1 MB que, quando extraído, ocupa 50 GB. O processo trava, a memória esgota e o serviço fica indisponível para outros usuários.

Cómo mitigar

Defina limites rígidos no tamanho máximo permitido após descompactação (ex: rejeitar se ultrapassar 100 MB) e implemente timeouts. Durante a extração, monitore o tamanho em tempo real e interrompa se exceder o limite, sem confiar apenas na informação de tamanho declarada no arquivo.

CVE-2026-78384HIGHApache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)EPSS 0.4%CVE-2026-86104HIGHFireware OS Resource Exhaustion in Login Process Allows Denial of ServiceEPSS 0.4%CVE-2026-111924HIGHFleet before 4.83.0 Denial of Service via Unbounded Gzip DecompressionEPSS 0.4%CVE-2026-96618LOWHex exhausts memory and disk on oversized or compressed responses from an untrusted mirrorEPSS 0.4%CVE-2026-97334HIGHNetwork messaging layer decompression resource exhaustionEPSS 0.4%CVE-2026-3114MEDIUMZip Bomb Denial of Service via Unrestricted Archive DecompressionEPSS 0.4%CVE-2026-96636MEDIUMPillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)EPSS 0.3%CVE-2026-107210MEDIUMImageMagick: Policy Bypass in MAT decoder when reading highly compressed dataEPSS 0.3%CVE-2026-122323HIGHKyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature DecompressionEPSS 0.3%CVE-2026-12588MEDIUMAn attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection wEPSS 0.3%CVE-2026-79695HIGHDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper HandlingEPSS 0.3%CVE-2026-55195HIGHpy7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction sizeEPSS 0.3%CVE-2026-109324HIGHGrav before 2.1.7 Memory Exhaustion via Oversized Image TransformsEPSS 0.3%CVE-2026-102477HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable peEPSS 0.3%CVE-2026-32630MEDIUMfile-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entryEPSS 0.3%CVE-2026-116175HIGHvLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat CompletionsEPSS 0.3%CVE-2026-42886MEDIUMAudiobookshelf: Memory amplification DoS via oversized compressed details entry in backup uploadEPSS 0.3%CVE-2026-109294HIGHOpen WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote ImageEPSS 0.3%CVE-2026-102695HIGHOmniFaces: Forged combined-resource IDs and related output/push boundariesEPSS 0.3%CVE-2026-39373MEDIUMJWCrypto: JWE ZIP decompression bombEPSS 0.3%