Falhas do tipo CWE-134

154 resultados

Uso de String de Formatação Controlada Externamente

Ocorre quando um programa usa entrada do usuário diretamente como argumento de formato em funções como printf(), sprintf() ou similares, sem validação. Um atacante pode injetar especificadores de formato (%x, %s, %n) para ler memória, derrubar a aplicação ou executar código arbitrário.

Exemplo

Um programa web recebe um parâmetro GET e faz printf(usuario_input) em vez de printf("%s", usuario_input). Um atacante envia ?name=%x%x%x e consegue vazar valores da pilha, ou usa %n para escrever na memória.

Como mitigar

Sempre use string de formato estática e fixa (literal), nunca construída a partir de entrada externa. Valide e sanitize qualquer dado de usuário antes de usá-lo em funções de formatação. Ferramentas como -Wformat-security do GCC ajudam a detectar isso em tempo de compilação.

CVE-2022-43869MEDIUMIBM Spectrum Scale denial of serviceEPSS 1.0%CVE-2023-25815LOWGit looks for localized messages in the wrong placeEPSS 1.0%CVE-2024-42330CRITICALJS - Internal strings in HTTP headersEPSS 0.9%CVE-2022-33938HIGHA format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. iota All-In-One SecuEPSS 0.9%CVE-2026-63073CRITICALUntrusted Sender DN Used as Format String in CMP Response ValidationEPSS 0.9%CVE-2025-40600CRITICALUse of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause EPSS 0.9%CVE-2022-35875HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2022-35874HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2022-35877HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2022-35876HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2023-6764HIGH A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.3EPSS 0.9%CVE-2023-48221HIGHwire-avs remote format string vulnerability EPSS 0.9%CVE-2026-69395MEDIUMActive Directory Certificate Services (AD CS) Information Disclosure VulnerabilityEPSS 0.9%CVE-2023-41349HIGHASUS RT-AX88U - externally-controlled format stringEPSS 0.9%CVE-2026-33210HIGHRuby JSON has a format string injection vulnerabilityEPSS 0.9%CVE-2022-43619MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 0.8%CVE-2022-35879HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%CVE-2022-35878HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%CVE-2022-35880HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%CVE-2022-35881HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%