Falhas do tipo CWE-805
55 resultadosAcesso a buffer com comprimento incorreto
O código acessa um buffer (arranjo de memória) usando um valor de comprimento que não corresponde ao tamanho real alocado, causando leitura ou escrita além dos limites. Isso permite corrupção de memória, vazamento de dados ou execução de código arbitrário.
Exemplo
Uma função copia N bytes para um buffer de tamanho M, onde N > M, porque o desenvolvedor usou a variável errada para controlar o loop ou recebeu um valor de tamanho malformado de entrada externa sem validação.
Como mitigar
Sempre validar e limitar valores de comprimento contra o tamanho real do buffer antes de qualquer operação; usar funções seguras (como `snprintf` em vez de `sprintf`) que respeitam limites; empregar análise estática para detectar descasamentos entre alocação e acesso.
CVE-2020-14509—Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verifyEPSS 2.0%CVE-2025-23319HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofEPSS 1.6%CVE-2024-24851HIGHA heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.EPSS 1.4%CVE-2021-31885—A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (EPSS 1.2%CVE-2023-20049HIGHCisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service VulnerabilityEPSS 1.0%CVE-2020-16101HIGHIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer acEPSS 1.0%CVE-2022-0519MEDIUMBuffer Access with Incorrect Length Value in radareorg/radare2EPSS 1.0%CVE-2025-20169HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.8%CVE-2025-20170HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.8%CVE-2025-20174HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.7%CVE-2025-20175HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.7%CVE-2022-47375HIGHA vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400EPSS 0.7%CVE-2023-5396HIGHServer receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code exeEPSS 0.7%CVE-2025-23318HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofEPSS 0.7%CVE-2026-44893HIGHNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthEPSS 0.6%CVE-2023-52557HIGHOpenBSD 7.3 invalid l2tp message npppd crashEPSS 0.6%CVE-2026-26955HIGHFreeRDP has Out-of-bounds WriteEPSS 0.5%CVE-2024-34476MEDIUMOpen5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/nEPSS 0.5%CVE-2026-34002MEDIUMXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingEPSS 0.5%CVE-2026-8091CRITICALIncorrect boundary conditions in the Audio/Video: Playback componentEPSS 0.5%