Weaknesses of type CWE-130

106 results

Inconsistência no tratamento de parâmetros de comprimento

Ocorre quando o código não valida ou trata adequadamente inconsistências entre o comprimento declarado de um buffer/string e seu tamanho real. Um atacante explora essa discrepância para causar leitura ou escrita fora dos limites, levando a vazamento de dados, corrupção de memória ou execução de código.

Example

Uma função recebe uma string com um parâmetro 'length' que não corresponde ao tamanho real do buffer. Se o código copia 'length' bytes sem verificar se o buffer realmente possui esse tamanho, um memcpy() ou strcpy() escreve além do limite alocado, ou lê dados inválidos de memória adjacente.

How to mitigate

Sempre validar que o parâmetro de comprimento é coerente com o tamanho real do buffer antes de operações de cópia ou leitura. Use funções seguras (strncpy, memcpy_s) e implemente checks explícitos: se length > buffer_size, rejeitar ou truncar. Ferramentas de análise estática ajudam a detectar esse padrão.

CVE-2024-41990HIGHAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a pEPSS 1.3%CVE-2022-0677HIGHImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)EPSS 1.2%CVE-2018-5453—An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and EPSS 1.2%CVE-2024-38875HIGHAn issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of serviEPSS 1.2%CVE-2022-1543CRITICALImproper handling of Length parameter in erudika/scooldEPSS 1.1%CVE-2023-40167MEDIUMJetty accepts "+" prefixed value in Content-LengthEPSS 1.1%CVE-2024-37988HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2024-37989HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2024-38010HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2024-41991HIGHAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldEPSS 1.0%CVE-2025-8531MEDIUMImproper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, QEPSS 1.0%CVE-2021-3454MEDIUMTruncated L2CAP K-frame causes assertion failureEPSS 0.9%CVE-2022-20686MEDIUMMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmwareEPSS 0.9%CVE-2024-24976MEDIUMA denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS PlatEPSS 0.9%CVE-2026-5367HIGHOvn: ovn: information disclosure via crafted dhcpv6 packetsEPSS 0.9%CVE-2022-20870HIGHCisco IOS XE Software for Catalyst Switches MPLS Denial of Service VulnerabilityEPSS 0.9%CVE-2024-20416MEDIUMA vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to EPSS 0.9%CVE-2026-31635HIGHrxrpc: fix oversized RESPONSE authenticator length checkEPSS 0.8%CVE-2022-2714HIGHImproper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosisEPSS 0.8%CVE-2022-3290MEDIUMImproper Handling of Length Parameter Inconsistency in ikus060/rdiffwebEPSS 0.7%