Fallos del tipo CWE-823

111 resultados

Uso de índice fora dos limites do ponteiro

Ocorre quando código calcula um deslocamento (offset) de ponteiro sem validar se o resultado aponta para uma localização válida na memória alocada. O programa acessa ou modifica posições de memória que não fazem parte do bloco alocado, causando corrupção de dados, leitura não autorizada ou execução de código.

Ejemplo

Um aplicativo aloca um buffer de 100 bytes e, ao processar um índice fornecido pelo usuário, calcula `ponteiro + indice_usuario` sem verificar se `indice_usuario` ultrapassa 99. Ao acessar essa posição calculada, o código toca em memória fora do buffer alocado.

Cómo mitigar

Sempre validar índices e deslocamentos antes de usá-los em aritmética de ponteiros. Usar funções seguras de cálculo de offset, implementar verificação de limites (bounds checking) e considerar usar linguagens ou ferramentas que fazem isso automaticamente, como AddressSanitizer durante desenvolvimento.

CVE-2022-43665MEDIUMA denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead EPSS 0.3%CVE-2024-42388MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42389MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42387MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2026-21732CRITICALGPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilationEPSS 0.3%CVE-2024-42391MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42390MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2026-104944HIGHUnauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500EPSS 0.3%CVE-2024-42383MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2026-74912CRITICALGPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GBEPSS 0.3%CVE-2023-43534HIGHUse of Out-of-range Pointer Offset in WLAN HOSTEPSS 0.3%CVE-2024-1013HIGHUnixodbc: out of bounds stack write due to pointer-to-integer types conversionEPSS 0.3%CVE-2023-6560MEDIUMKernel: io_uring out of boundary memory access in __io_uaddr_map()EPSS 0.3%CVE-2024-47893MEDIUMGPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)EPSS 0.3%CVE-2022-42264HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use EPSS 0.3%CVE-2026-74915HIGHGPU DDK - OOB write in UntwiddlePOTSquare64bppEPSS 0.3%CVE-2025-33215MEDIUMNVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointeEPSS 0.3%CVE-2024-52935MEDIUMGPU DDK - psContext->eDM gives OOB writeEPSS 0.2%CVE-2026-28764HIGHA heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially EPSS 0.2%CVE-2020-8904MEDIUMArbitrary trusted memory overwrite vulnerability in AsyloEPSS 0.2%