Falhas do tipo CWE-1284

387 resultados

Validação inadequada de quantidade em entrada

Ocorre quando o software aceita entrada do usuário que especifica uma quantidade (número de items, tamanho de buffer, contagem de loops, etc.) sem validar se esse valor está dentro dos limites esperados. Um atacante pode fornecer uma quantidade excessiva, nula ou negativa, causando alocação de memória descontrolada, loops infinitos, underflow ou acesso a dados não inicializados.

Exemplo

Um serviço web recebe um parâmetro 'quantidade_registros' para retornar dados. Se não validar o valor, um atacante envia quantidade_registros=999999999, forçando alocação massiva de memória e negação de serviço; ou envia -1 e o código interpreta como unsigned, provocando comportamento inesperado.

Como mitigar

Valide explicitamente toda entrada que represente uma quantidade: defina limites mínimo e máximo aceitáveis, rejeite valores fora do intervalo, e use tipos numéricos apropriados (prefira unsigned para contagens, com overflow checks). Teste casos extremos (zero, negativo, muito grande).

CVE-2025-36009MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2026-107079MEDIUMAn issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auEPSS 0.4%CVE-2024-27360MEDIUMA vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, ExyEPSS 0.4%CVE-2026-77640LOWtor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reacEPSS 0.4%CVE-2026-56035HIGHWordPress BitFire Security plugin <= 5.0.3 - Multiple Vulnerabilities vulnerabilityEPSS 0.4%CVE-2024-39343HIGHAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123EPSS 0.4%CVE-2025-8320HIGHTesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-21485HIGHiccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()EPSS 0.4%CVE-2023-0194LOWNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuraEPSS 0.4%CVE-2021-47831MEDIUMSandboxie 5.49.7 - Denial of ServiceEPSS 0.4%CVE-2025-55398CRITICALAn issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c. In UPER (Unaligned Packed Encoding Rules), asn1cEPSS 0.4%CVE-2022-22166MEDIUMJunos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is receivedEPSS 0.4%CVE-2025-36424MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2025-36427MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2026-59532HIGHWordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerabilityEPSS 0.4%CVE-2025-5257MEDIUMPredictable Page Indexing Might Lead to Sensitive Data ExposureEPSS 0.4%CVE-2026-12755LOWImproper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated usEPSS 0.4%CVE-2026-119749HIGHGetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment BypassEPSS 0.4%CVE-2026-44635HIGHKysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`EPSS 0.4%CVE-2021-47824MEDIUMiDailyDiary 4.30 - Denial of Service (PoC)EPSS 0.4%