Falhas do tipo CWE-409

190 resultados

Manipulação inadequada de dados altamente comprimidos (amplificação de dados)

Ocorre quando uma aplicação processa dados comprimidos (ZIP, GZIP, etc.) sem validar ou limitar adequadamente o tamanho descompactado. Um arquivo pequeno pode explodir para gigabytes na memória, causando negação de serviço (DoS) ou travamento do sistema.

Exemplo

Um servidor web aceita upload de arquivo ZIP comprimido com 1 MB, descompacta sem verificar o tamanho final, e se expande para 10 GB na RAM, consumindo toda memória disponível e derrubando o serviço. Esse é o clássico 'zip bomb'.

Como mitigar

Valide o tamanho descompactado antes de processar: defina limites máximos de expansão (ex: máximo 100x maior que o original), monitore o crescimento em tempo real e pare se exceder, e implemente timeouts. Também considere processar em chunks ao invés de descompactar tudo de uma vez.

CVE-2026-78384HIGHApache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)EPSS 0.4%CVE-2026-86104HIGHFireware OS Resource Exhaustion in Login Process Allows Denial of ServiceEPSS 0.4%CVE-2026-111924HIGHFleet before 4.83.0 Denial of Service via Unbounded Gzip DecompressionEPSS 0.4%CVE-2026-96618LOWHex exhausts memory and disk on oversized or compressed responses from an untrusted mirrorEPSS 0.4%CVE-2026-97334HIGHNetwork messaging layer decompression resource exhaustionEPSS 0.4%CVE-2026-3114MEDIUMZip Bomb Denial of Service via Unrestricted Archive DecompressionEPSS 0.4%CVE-2026-96636MEDIUMPillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)EPSS 0.3%CVE-2026-107210MEDIUMImageMagick: Policy Bypass in MAT decoder when reading highly compressed dataEPSS 0.3%CVE-2026-122323HIGHKyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature DecompressionEPSS 0.3%CVE-2026-12588MEDIUMAn attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection wEPSS 0.3%CVE-2026-79695HIGHDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper HandlingEPSS 0.3%CVE-2026-55195HIGHpy7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction sizeEPSS 0.3%CVE-2026-109324HIGHGrav before 2.1.7 Memory Exhaustion via Oversized Image TransformsEPSS 0.3%CVE-2026-102477HIGHIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable peEPSS 0.3%CVE-2026-32630MEDIUMfile-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entryEPSS 0.3%CVE-2026-116175HIGHvLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat CompletionsEPSS 0.3%CVE-2026-42886MEDIUMAudiobookshelf: Memory amplification DoS via oversized compressed details entry in backup uploadEPSS 0.3%CVE-2026-109294HIGHOpen WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote ImageEPSS 0.3%CVE-2026-102695HIGHOmniFaces: Forged combined-resource IDs and related output/push boundariesEPSS 0.3%CVE-2026-39373MEDIUMJWCrypto: JWE ZIP decompression bombEPSS 0.3%