Weaknesses of type CWE-805

55 results

Acesso a buffer com tamanho incorreto

Ocorre quando o código acessa um buffer (lê ou escreve) usando um tamanho que não corresponde ao tamanho real alocado ou esperado. Isso permite leitura ou escrita além dos limites, causando corrupção de memória, vazamento de dados ou execução de código arbitrário.

Example

Uma função recebe um tamanho de dado como parâmetro e usa esse valor diretamente em memcpy() sem validar se ele não ultrapassa o tamanho real do buffer. Um atacante passa um tamanho maior, provocando overflow e sobrescrita de memória adjacente.

How to mitigate

Sempre validar e limitar o tamanho de acesso ao menor entre o tamanho solicitado e o tamanho real do buffer. Use APIs seguras como strncpy() em vez de strcpy(), e implemente verificações explícitas de limites antes de qualquer leitura ou escrita.

CVE-2020-14509—Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verifyEPSS 2.0%CVE-2025-23319HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofEPSS 1.6%CVE-2024-24851HIGHA heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.EPSS 1.4%CVE-2021-31885—A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (EPSS 1.2%CVE-2023-20049HIGHCisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service VulnerabilityEPSS 1.0%CVE-2020-16101HIGHIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer acEPSS 1.0%CVE-2022-0519MEDIUMBuffer Access with Incorrect Length Value in radareorg/radare2EPSS 1.0%CVE-2025-20169HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.8%CVE-2025-20170HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.8%CVE-2025-20174HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.7%CVE-2025-20175HIGHA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to causeEPSS 0.7%CVE-2022-47375HIGHA vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400EPSS 0.7%CVE-2023-5396HIGHServer receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code exeEPSS 0.7%CVE-2025-23318HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofEPSS 0.7%CVE-2026-44893HIGHNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthEPSS 0.6%CVE-2023-52557HIGHOpenBSD 7.3 invalid l2tp message npppd crashEPSS 0.6%CVE-2026-26955HIGHFreeRDP has Out-of-bounds WriteEPSS 0.5%CVE-2024-34476MEDIUMOpen5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/nEPSS 0.5%CVE-2026-34002MEDIUMXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingEPSS 0.5%CVE-2026-8091CRITICALIncorrect boundary conditions in the Audio/Video: Playback componentEPSS 0.5%