Falhas do tipo CWE-1284

324 resultados

Validação inadequada de quantidade em entrada

Ocorre quando o software aceita entrada do usuário que especifica uma quantidade (número de items, tamanho de buffer, contagem de loops, etc.) sem validar se esse valor está dentro dos limites esperados. Um atacante pode fornecer uma quantidade excessiva, nula ou negativa, causando alocação de memória descontrolada, loops infinitos, underflow ou acesso a dados não inicializados.

Exemplo

Um serviço web recebe um parâmetro 'quantidade_registros' para retornar dados. Se não validar o valor, um atacante envia quantidade_registros=999999999, forçando alocação massiva de memória e negação de serviço; ou envia -1 e o código interpreta como unsigned, provocando comportamento inesperado.

Como mitigar

Valide explicitamente toda entrada que represente uma quantidade: defina limites mínimo e máximo aceitáveis, rejeite valores fora do intervalo, e use tipos numéricos apropriados (prefira unsigned para contagens, com overflow checks). Teste casos extremos (zero, negativo, muito grande).

CVE-2026-59317MEDIUMIn Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loopEPSS 0.4%CVE-2025-11594MEDIUMywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in inputEPSS 0.4%CVE-2024-39343HIGHAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123EPSS 0.4%CVE-2026-53794MEDIUMrsync < 3.5.0 Denial of Service via --max-alloc=0 Logic ErrorEPSS 0.4%CVE-2022-22166MEDIUMJunos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is receivedEPSS 0.4%CVE-2025-55398CRITICALAn issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c. In UPER (Unaligned Packed Encoding Rules), asn1cEPSS 0.4%CVE-2023-0194LOWNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuraEPSS 0.4%CVE-2026-12755LOWImproper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated usEPSS 0.4%CVE-2026-44635HIGHKysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`EPSS 0.4%CVE-2026-21485HIGHiccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()EPSS 0.4%CVE-2022-47029HIGHAn issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function updatEPSS 0.4%CVE-2025-36009MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2026-60820HIGHVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-2EPSS 0.4%CVE-2025-14869HIGHImproper Validation of Specified Quantity in Input in GitLabEPSS 0.4%CVE-2026-76763HIGHIo.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literalsEPSS 0.4%CVE-2026-55706MEDIUMsppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.EPSS 0.4%CVE-2021-47824MEDIUMiDailyDiary 4.30 - Denial of Service (PoC)EPSS 0.4%CVE-2026-76442HIGHCisco Secure Email Gateway Security Hardening ReleaseEPSS 0.4%CVE-2026-57364MEDIUMWordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerabilityEPSS 0.4%CVE-2026-93749HIGHsource-map-js through 1.2.1 Event Loop Denial of ServiceEPSS 0.4%