Falhas do tipo CWE-130

144 resultados

Tratamento inadequado de inconsistência em parâmetros de comprimento

Ocorre quando o código não valida ou não sincroniza corretamente parâmetros que indicam o comprimento de dados (strings, buffers, arrays). Se o comprimento declarado não bate com o tamanho real, o código pode ler/escrever além dos limites, causando corrupção de memória, leitura de dados sensíveis ou crash.

Exemplo

Uma API recebe um buffer e um inteiro 'length' como parâmetro. Se o desenvolvedor não verifica se 'length' é realmente igual ao tamanho alocado do buffer, um atacante pode informar um valor artificialmente alto e provocar leitura de memória além do esperado.

Como mitigar

Sempre validar que o parâmetro de comprimento corresponde aos limites reais do dado (tamanho alocado, string terminada em null, etc). Use funções seguras que garantem limites (como strncpy em vez de strcpy) e implemente verificações explícitas antes de qualquer operação que dependa desse parâmetro.

CVE-2023-50248MEDIUMCKAN out of memory error when submitting the dataset form with a specially-crafted fieldEPSS 0.6%CVE-2026-14587MEDIUMUnathenticated connection can hold Bolt channel openEPSS 0.5%CVE-2026-87022HIGHApache Tomcat: WebSocket message smuggling with per-message-deflateEPSS 0.5%CVE-2026-43125CRITICALdlm: validate length in dlm_search_rsb_treeEPSS 0.5%CVE-2022-41586HIGHThe communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affEPSS 0.5%CVE-2026-77619HIGHVector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.EPSS 0.5%CVE-2026-73455HIGHSecurity Advisory 0173EPSS 0.5%CVE-2020-10065LOWMissing Size Checks in Bluetooth HCI over SPIEPSS 0.5%CVE-2026-33936MEDIUMpython-ecdsa: Denial of Service via improper DER length validation in crafted private keysEPSS 0.5%CVE-2026-67292CRITICALFreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosureEPSS 0.5%CVE-2026-26081MEDIUMHAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also EPSS 0.5%CVE-2024-53856HIGHrPGP Panics on Malformed Untrusted InputEPSS 0.5%CVE-2026-48487MEDIUMZeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packetEPSS 0.5%CVE-2026-42216HIGHOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionEPSS 0.5%CVE-2023-5778CRITICALMissing Length CheckEPSS 0.5%CVE-2026-81575HIGHMissing Sanity Checks for Buffer LengthsEPSS 0.5%CVE-2024-42460MEDIUMIn the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit EPSS 0.5%CVE-2024-37305HIGHBuffer overflow in deserialization in oqs-provider EPSS 0.4%CVE-2026-92159MEDIUMF´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetryEPSS 0.4%CVE-2025-29931MEDIUMA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected product does not properly validate aEPSS 0.4%