Fallos del tipo CWE-1285

58 resultados

Validação inadequada de índice, posição ou offset no input

O código aceita um índice, posição ou offset fornecido pelo usuário sem validar se está dentro dos limites válidos da estrutura de dados. Isso permite acessar, modificar ou corromper dados fora dos bounds esperados, causando crashes, exposição de informações sensíveis ou execução de código.

Ejemplo

Uma API recebe um offset para ler bytes de um arquivo: o desenvolvedor não verifica se offset + tamanho ultrapassa o final do arquivo, permitindo leitura de memória além dos limites ou acesso a dados adjacentes não autorizados.

Cómo mitigar

Sempre validar que índice/posição/offset está dentro do intervalo permitido (0 <= valor < limite máximo) antes de usar. Implementar checks explícitos e usar tipos que naturalmente enforçam limites, como arrays com tamanho fixo em Rust ou bounds checking automático em linguagens de alto nível.

CVE-2025-7848HIGHMissing input check in lvpict.cpp used in NI LabVIEWEPSS 4.2%CVE-2023-46724HIGHSQUID-2023:4 Denial of Service in SSL Certificate validationEPSS 4.0%CVE-2022-21821HIGHNVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would requiEPSS 2.0%CVE-2026-2006HIGHPostgreSQL missing validation of multibyte character length executes arbitrary codeEPSS 1.1%CVE-2020-25241—A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does EPSS 1.0%CVE-2025-3357CRITICALIBM Tivoli Monitoring code executionEPSS 0.9%CVE-2022-22223MEDIUMJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.EPSS 0.8%CVE-2026-32285HIGHDenial of service in github.com/buger/jsonparserEPSS 0.8%CVE-2025-3755CRITICALInformation Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU moduleEPSS 0.7%CVE-2026-43868MEDIUMApache Thrift: Rust implementation vulnerable to CVE-2020-13949 patternEPSS 0.7%CVE-2025-67268CRITICALgpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 funEPSS 0.7%CVE-2026-33557CRITICALApache Kafka: Missing JWT token validation in OAUTHBEARER authenticationEPSS 0.7%CVE-2022-22201HIGHSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetEPSS 0.6%CVE-2025-2399MEDIUMDenial of Service (DoS) Vulnerability in Mitsubishi Electric CNC SeriesEPSS 0.6%CVE-2024-23612HIGHImproper Error Handling Issue in LabVIEWEPSS 0.6%CVE-2024-23609HIGHImproper Error Handling Issue in LabVIEWEPSS 0.6%CVE-2023-0859LOWArbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). EPSS 0.5%CVE-2026-32286HIGHDenial of service in github.com/jackc/pgproto3/v2EPSS 0.5%CVE-2024-51564HIGHbhyve(8) infinite loop in the hda audio driverEPSS 0.4%CVE-2025-55087MEDIUMIn NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by aEPSS 0.4%