Falhas do tipo CWE-1284

387 resultados

Validação inadequada de quantidade em entrada

Ocorre quando o software aceita entrada do usuário que especifica uma quantidade (número de items, tamanho de buffer, contagem de loops, etc.) sem validar se esse valor está dentro dos limites esperados. Um atacante pode fornecer uma quantidade excessiva, nula ou negativa, causando alocação de memória descontrolada, loops infinitos, underflow ou acesso a dados não inicializados.

Exemplo

Um serviço web recebe um parâmetro 'quantidade_registros' para retornar dados. Se não validar o valor, um atacante envia quantidade_registros=999999999, forçando alocação massiva de memória e negação de serviço; ou envia -1 e o código interpreta como unsigned, provocando comportamento inesperado.

Como mitigar

Valide explicitamente toda entrada que represente uma quantidade: defina limites mínimo e máximo aceitáveis, rejeite valores fora do intervalo, e use tipos numéricos apropriados (prefira unsigned para contagens, com overflow checks). Teste casos extremos (zero, negativo, muito grande).

CVE-2026-27171LOWzlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that EPSS 0.2%CVE-2024-6068HIGHInput Validation Vulnerability exists in Arena® Input AnalyzerEPSS 0.2%CVE-2026-42732MEDIUMWordPress Ads by WPQuads plugin <= 3.0.2 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2026-93475CRITICALOut-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509EPSS 0.2%CVE-2025-24100LOWA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3EPSS 0.2%CVE-2026-7254MEDIUMOpen BMC Denial of ServiceEPSS 0.2%CVE-2023-27961MEDIUMMultiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1EPSS 0.2%CVE-2024-53878LOWNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a maEPSS 0.2%CVE-2026-11596MEDIUMIn ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user witEPSS 0.2%CVE-2026-49110HIGHWordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerabilityEPSS 0.2%CVE-2026-62083MEDIUMWordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerabilityEPSS 0.2%CVE-2026-35489HIGHTandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/`EPSS 0.2%CVE-2026-20562MEDIUMIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coEPSS 0.2%CVE-2026-87735MEDIUMAn issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message durinEPSS 0.2%CVE-2022-20493HIGHIn Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to loEPSS 0.2%CVE-2026-103350MEDIUMWordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerabilityEPSS 0.2%CVE-2026-103351MEDIUMWordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerabilityEPSS 0.2%CVE-2024-5102HIGHElevation of Privelage via symlinked file in Avast AntivirusEPSS 0.2%CVE-2026-101995MEDIUMJunos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruptionEPSS 0.2%CVE-2025-59820MEDIUMIn KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kis_tga_import.EPSS 0.2%