Falhas do tipo CWE-1284

387 resultados

Validação inadequada de quantidade em entrada

Ocorre quando o software aceita entrada do usuário que especifica uma quantidade (número de items, tamanho de buffer, contagem de loops, etc.) sem validar se esse valor está dentro dos limites esperados. Um atacante pode fornecer uma quantidade excessiva, nula ou negativa, causando alocação de memória descontrolada, loops infinitos, underflow ou acesso a dados não inicializados.

Exemplo

Um serviço web recebe um parâmetro 'quantidade_registros' para retornar dados. Se não validar o valor, um atacante envia quantidade_registros=999999999, forçando alocação massiva de memória e negação de serviço; ou envia -1 e o código interpreta como unsigned, provocando comportamento inesperado.

Como mitigar

Valide explicitamente toda entrada que represente uma quantidade: defina limites mínimo e máximo aceitáveis, rejeite valores fora do intervalo, e use tipos numéricos apropriados (prefira unsigned para contagens, com overflow checks). Teste casos extremos (zero, negativo, muito grande).

CVE-2026-54890HIGHBEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decodingEPSS 0.4%CVE-2025-43964LOWIn LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.EPSS 0.4%CVE-2026-20313HIGHCisco Catalyst SD-WAN Security Hardening Release - Memory Corruption VulnerabilitiesEPSS 0.4%CVE-2025-70069HIGHAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() metEPSS 0.4%CVE-2025-65548CRITICALNUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of pEPSS 0.4%CVE-2026-89420HIGHSession voucher adding no new funds is accepted without a charge in mpp, serving paid resources for freeEPSS 0.4%CVE-2026-81851MEDIUMFireware OS Heap-Based Buffer Overflow in iked Allows Denial of ServiceEPSS 0.4%CVE-2021-47821MEDIUMRarmaRadio 2.72.8 - Denial of ServiceEPSS 0.4%CVE-2025-14511HIGHImproper Validation of Specified Quantity in Input in GitLabEPSS 0.4%CVE-2025-43793MEDIUMLiferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA throuEPSS 0.4%CVE-2026-3676MEDIUMThere are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.EPSS 0.4%CVE-2022-48297HIGHThe geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability EPSS 0.4%CVE-2022-48298HIGHThe geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounEPSS 0.4%CVE-2023-7332HIGHPocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server CrashEPSS 0.4%CVE-2026-76899MEDIUMCordysCRM: Authenticated SQL injection via `sort.name` on `POST /account-pool/page`EPSS 0.4%CVE-2026-11721HIGHCache poisoning possible with label count discrepancy, RRSIG, and wildcardsEPSS 0.4%CVE-2026-93015HIGHBlueKitchen BTstack through 1.8.2 A2DP SEP Discovery Out-of-Bounds WriteEPSS 0.4%CVE-2026-83115HIGHVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versiEPSS 0.4%CVE-2026-97057HIGHredis-parser through 3.0.0 Denial of Service via Invalid Array LengthEPSS 0.4%CVE-2026-60820HIGHVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-2EPSS 0.4%