Weaknesses of type CWE-1285

58 results

Validação inadequada de índice, posição ou deslocamento na entrada

A aplicação aceita um índice, posição ou offset fornecido pelo usuário sem validar se ele está dentro dos limites permitidos da estrutura de dados (array, string, buffer, etc.). Isso permite acesso a posições inválidas, causando leitura de dados sensíveis, corrupção de memória ou travamento do programa.

Example

Um API REST que retorna itens de uma lista permite passar um parâmetro ?offset=999999 sem verificar se existe dados naquela posição. Um atacante varre offsets arbitrários para ler dados de outros usuários ou causar erro de negação de serviço.

How to mitigate

Sempre validar que o índice/offset/posição está dentro do intervalo válido (0 até tamanho-1) antes de acessar. Use safeguards na linguagem (bounds checking automático quando disponível) e trate entradas suspeitas como erro, rejeitando-as ou retornando falha explícita.

CVE-2025-7848HIGHMissing input check in lvpict.cpp used in NI LabVIEWEPSS 4.2%CVE-2023-46724HIGHSQUID-2023:4 Denial of Service in SSL Certificate validationEPSS 4.0%CVE-2022-21821HIGHNVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would requiEPSS 2.0%CVE-2026-2006HIGHPostgreSQL missing validation of multibyte character length executes arbitrary codeEPSS 1.1%CVE-2020-25241—A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does EPSS 1.0%CVE-2025-3357CRITICALIBM Tivoli Monitoring code executionEPSS 0.9%CVE-2022-22223MEDIUMJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.EPSS 0.8%CVE-2026-32285HIGHDenial of service in github.com/buger/jsonparserEPSS 0.8%CVE-2025-3755CRITICALInformation Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.7%CVE-2026-43868MEDIUMApache Thrift: Rust implementation vulnerable to CVE-2020-13949 patternEPSS 0.7%CVE-2025-67268CRITICALgpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 funEPSS 0.7%CVE-2026-33557CRITICALApache Kafka: Missing JWT token validation in OAUTHBEARER authenticationEPSS 0.7%CVE-2022-22201HIGHSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetEPSS 0.6%CVE-2025-2399MEDIUMDenial of Service (DoS) Vulnerability in Mitsubishi Electric CNC SeriesEPSS 0.6%CVE-2024-23612HIGHImproper Error Handling Issue in LabVIEWEPSS 0.6%CVE-2024-23609HIGHImproper Error Handling Issue in LabVIEWEPSS 0.6%CVE-2023-0859LOWArbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). EPSS 0.5%CVE-2026-32286HIGHDenial of service in github.com/jackc/pgproto3/v2EPSS 0.5%CVE-2024-51564HIGHbhyve(8) infinite loop in the hda audio driverEPSS 0.4%CVE-2025-55087MEDIUMIn NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by aEPSS 0.4%