Fallos del tipo CWE-805

55 resultados

Acesso a buffer com valor de comprimento incorreto

O código acessa um buffer usando um valor de comprimento que não corresponde ao tamanho real alocado, permitindo leitura ou escrita além dos limites. Isso ocorre quando há desajuste entre o tamanho declarado e o tamanho efetivo do buffer, causando corrupção de memória ou exposição de dados sensíveis.

Ejemplo

Um programa aloca 256 bytes para um buffer, mas usa uma variável com valor 512 em uma operação de cópia ou leitura, acessando 256 bytes além do permitido. Ou ainda: uma função recebe um parâmetro de tamanho fornecido pelo usuário sem validar se é compatível com o buffer alocado.

Cómo mitigar

Sempre validar que o comprimento fornecido (seja de entrada, parâmetro ou fonte externa) não ultrapassa o tamanho real do buffer antes de qualquer operação. Use funções seguras que exigem o tamanho explícito (como strncpy em vez de strcpy) e mantenha invariantes claros entre alocação e uso.

CVE-2020-14509—Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verifyEPSS 2.0%CVE-2025-23319HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofEPSS 1.6%CVE-2024-24851HIGHA heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.EPSS 1.4%CVE-2021-31885—A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (EPSS 1.2%CVE-2023-20049HIGHCisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service VulnerabilityEPSS 1.0%CVE-2020-16101HIGHIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer acEPSS 1.0%CVE-2022-0519MEDIUMBuffer Access with Incorrect Length Value in radareorg/radare2EPSS 1.0%CVE-2025-20169HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.8%CVE-2025-20170HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.8%CVE-2025-20174HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.7%CVE-2025-20175HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.7%CVE-2022-47375HIGHA vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400EPSS 0.7%CVE-2023-5396HIGHServer receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code exeEPSS 0.7%CVE-2025-23318HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofEPSS 0.7%CVE-2026-44893HIGHNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthEPSS 0.6%CVE-2023-52557HIGHOpenBSD 7.3 invalid l2tp message npppd crashEPSS 0.6%CVE-2026-26955HIGHFreeRDP has Out-of-bounds WriteEPSS 0.5%CVE-2024-34476MEDIUMOpen5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/nEPSS 0.5%CVE-2026-34002MEDIUMXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingEPSS 0.5%CVE-2026-8091CRITICALIncorrect boundary conditions in the Audio/Video: Playback componentEPSS 0.5%