Falhas do tipo CWE-823

111 resultados

Uso de deslocamento de ponteiro fora do intervalo válido

Fraqueza onde o código calcula ou usa um deslocamento de ponteiro que aponta para fora dos limites válidos de um objeto na memória. Isso causa acesso a regiões de memória não alocadas ou não destinadas, levando a corrupção de dados, crash ou execução arbitrária de código.

Exemplo

Um buffer de 100 bytes é alocado, mas o código tenta acessar posição 150 usando aritmética de ponteiros (ptr + 50). Ou ao fazer cálculos com deslocamentos inteiros que não validam se o resultado aponta para dentro da alocação original.

Como mitigar

Validar sempre o intervalo de deslocamentos antes de usá-los (verificar se offset < tamanho_alocado). Usar bibliotecas seguras que encapsulam aritmética de ponteiros, ou linguagens com verificação de bounds automática (Rust, TypeScript). Em C/C++, realizar audit rigoroso de cálculos envolvendo sizeof e offsets.

CVE-2022-43665MEDIUMA denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead EPSS 0.3%CVE-2024-42388MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42389MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42387MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2026-21732CRITICALGPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilationEPSS 0.3%CVE-2024-42391MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2024-42390MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2026-104944HIGHUnauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500EPSS 0.3%CVE-2024-42383MEDIUMUse of Out-of-range Pointer Offset in Mongoose Web Server libraryEPSS 0.3%CVE-2026-74912CRITICALGPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GBEPSS 0.3%CVE-2023-43534HIGHUse of Out-of-range Pointer Offset in WLAN HOSTEPSS 0.3%CVE-2024-1013HIGHUnixodbc: out of bounds stack write due to pointer-to-integer types conversionEPSS 0.3%CVE-2023-6560MEDIUMKernel: io_uring out of boundary memory access in __io_uaddr_map()EPSS 0.3%CVE-2024-47893MEDIUMGPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)EPSS 0.3%CVE-2022-42264HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use EPSS 0.3%CVE-2026-74915HIGHGPU DDK - OOB write in UntwiddlePOTSquare64bppEPSS 0.3%CVE-2025-33215MEDIUMNVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointeEPSS 0.3%CVE-2024-52935MEDIUMGPU DDK - psContext->eDM gives OOB writeEPSS 0.2%CVE-2026-28764HIGHA heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially EPSS 0.2%CVE-2020-8904MEDIUMArbitrary trusted memory overwrite vulnerability in AsyloEPSS 0.2%