Falhas do tipo CWE-134

170 resultados

Uso de String de Formatação Controlada Externamente

Ocorre quando um programa usa entrada do usuário diretamente como argumento de formato em funções como printf(), sprintf() ou similares, sem validação. Um atacante pode injetar especificadores de formato (%x, %s, %n) para ler memória, derrubar a aplicação ou executar código arbitrário.

Exemplo

Um programa web recebe um parâmetro GET e faz printf(usuario_input) em vez de printf("%s", usuario_input). Um atacante envia ?name=%x%x%x e consegue vazar valores da pilha, ou usa %n para escrever na memória.

Como mitigar

Sempre use string de formato estática e fixa (literal), nunca construída a partir de entrada externa. Valide e sanitize qualquer dado de usuário antes de usá-lo em funções de formatação. Ferramentas como -Wformat-security do GCC ajudam a detectar isso em tempo de compilação.

CVE-2024-39529HIGHJunos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crashEPSS 0.5%CVE-2026-18187HIGHA format string vulnerability was found in the Internal Backup on the ADMEPSS 0.5%CVE-2026-18188HIGHA format string vulnerability was found in the Rsync Backup on the ADMEPSS 0.5%CVE-2026-18186HIGHA stored format string vulnerability was found in the FTP Backup on the ADMEPSS 0.5%CVE-2026-6250HIGHAuthenticated Format String Injection on TP-Link Tapo C110EPSS 0.5%CVE-2025-52666LOWImproper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administratorEPSS 0.5%CVE-2025-48730MEDIUMQTS, QuTS heroEPSS 0.4%CVE-2026-57877HIGHGV-LPC2011/LPC2211 - unauthorized format string vulnerability (vlsvr)EPSS 0.4%CVE-2026-63201HIGHnetopeer2-server logging has format string vulnerability via subtree filterEPSS 0.4%CVE-2026-101966HIGHJunos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of serviceEPSS 0.4%CVE-2026-81574HIGHFormat String Vulnerability in LoggerEPSS 0.4%CVE-2024-9129CRITICALFormat String Injection in Zend ServerEPSS 0.4%CVE-2026-76729MEDIUMAuthenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API EndpointEPSS 0.4%CVE-2026-73782HIGHUnauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CXEPSS 0.4%CVE-2026-15680HIGHLorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-102062CRITICALJunos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is usedEPSS 0.4%CVE-2026-46465MEDIUMDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1EPSS 0.4%CVE-2025-48388HIGHFreeScout Has Insufficient Protection Against CRLF-injectionEPSS 0.4%CVE-2025-22482LOWQsync CentralEPSS 0.4%CVE-2010-10017HIGHWM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U FileEPSS 0.4%