Falhas do tipo CWE-1284

387 resultados

Validação inadequada de quantidade em entrada

Ocorre quando o software aceita entrada do usuário que especifica uma quantidade (número de items, tamanho de buffer, contagem de loops, etc.) sem validar se esse valor está dentro dos limites esperados. Um atacante pode fornecer uma quantidade excessiva, nula ou negativa, causando alocação de memória descontrolada, loops infinitos, underflow ou acesso a dados não inicializados.

Exemplo

Um serviço web recebe um parâmetro 'quantidade_registros' para retornar dados. Se não validar o valor, um atacante envia quantidade_registros=999999999, forçando alocação massiva de memória e negação de serviço; ou envia -1 e o código interpreta como unsigned, provocando comportamento inesperado.

Como mitigar

Valide explicitamente toda entrada que represente uma quantidade: defina limites mínimo e máximo aceitáveis, rejeite valores fora do intervalo, e use tipos numéricos apropriados (prefira unsigned para contagens, com overflow checks). Teste casos extremos (zero, negativo, muito grande).

CVE-2025-14688MEDIUMIBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurationsEPSS 0.2%CVE-2025-46656LOWpython-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. This EPSS 0.2%CVE-2026-42657MEDIUMWordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerabilityEPSS 0.2%CVE-2026-33471CRITICALnimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncationEPSS 0.2%CVE-2026-44459LOWHono: Improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()EPSS 0.2%CVE-2026-111828MEDIUMWordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerabilityEPSS 0.2%CVE-2024-55407HIGHAn issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write aEPSS 0.2%CVE-2025-41100MEDIUMIncorrect authentication in ParkingDoorEPSS 0.2%CVE-2026-53689HIGHlibnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS serEPSS 0.2%CVE-2026-102111MEDIUMKiteworks Core Improper Validation of Specified Quantity in InputEPSS 0.2%CVE-2025-15645MEDIUMLedger Nano X, Flex, Stax MCU Firmware Update Denial of ServiceEPSS 0.2%CVE-2026-41285MEDIUMIn OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (EPSS 0.2%CVE-2024-56716MEDIUMnetdevsim: prevent bad user input in nsim_dev_health_break_write()EPSS 0.2%CVE-2026-42744MEDIUMWordPress Ads by WPQuads plugin <= 3.0.2 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2026-119186MEDIUMForge: AES-GCM authentication bypass via unvalidated tagLength optionEPSS 0.2%CVE-2026-103065HIGHWordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerabilityEPSS 0.2%CVE-2024-0111MEDIUMNVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a EPSS 0.2%CVE-2024-8000MEDIUMOn affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being installed after an Accelerated Software Upgrade (ASU) restarEPSS 0.2%CVE-2025-48507HIGHThe security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors accesEPSS 0.2%CVE-2026-19028MEDIUMHDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds readEPSS 0.2%