Falhas do tipo CWE-130

106 resultados

Tratamento inadequado de inconsistência em parâmetros de comprimento

Ocorre quando o código não valida ou não sincroniza corretamente parâmetros que indicam o comprimento de dados (strings, buffers, arrays). Se o comprimento declarado não bate com o tamanho real, o código pode ler/escrever além dos limites, causando corrupção de memória, leitura de dados sensíveis ou crash.

Exemplo

Uma API recebe um buffer e um inteiro 'length' como parâmetro. Se o desenvolvedor não verifica se 'length' é realmente igual ao tamanho alocado do buffer, um atacante pode informar um valor artificialmente alto e provocar leitura de memória além do esperado.

Como mitigar

Sempre validar que o parâmetro de comprimento corresponde aos limites reais do dado (tamanho alocado, string terminada em null, etc). Use funções seguras que garantem limites (como strncpy em vez de strcpy) e implemente verificações explícitas antes de qualquer operação que dependa desse parâmetro.

CVE-2024-41990HIGHAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a pEPSS 1.3%CVE-2022-0677HIGHImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)EPSS 1.2%CVE-2018-5453—An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and EPSS 1.2%CVE-2024-38875HIGHAn issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of serviEPSS 1.2%CVE-2022-1543CRITICALImproper handling of Length parameter in erudika/scooldEPSS 1.1%CVE-2023-40167MEDIUMJetty accepts "+" prefixed value in Content-LengthEPSS 1.1%CVE-2024-37988HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2024-37989HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2024-38010HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.0%CVE-2024-41991HIGHAn issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldEPSS 1.0%CVE-2025-8531MEDIUMImproper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, QEPSS 1.0%CVE-2021-3454MEDIUMTruncated L2CAP K-frame causes assertion failureEPSS 0.9%CVE-2022-20686MEDIUMMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmwareEPSS 0.9%CVE-2024-24976MEDIUMA denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS PlatEPSS 0.9%CVE-2026-5367HIGHOvn: ovn: information disclosure via crafted dhcpv6 packetsEPSS 0.9%CVE-2022-20870HIGHCisco IOS XE Software for Catalyst Switches MPLS Denial of Service VulnerabilityEPSS 0.9%CVE-2024-20416MEDIUMA vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to EPSS 0.9%CVE-2026-31635HIGHrxrpc: fix oversized RESPONSE authenticator length checkEPSS 0.8%CVE-2022-2714HIGHImproper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosisEPSS 0.8%CVE-2022-3290MEDIUMImproper Handling of Length Parameter Inconsistency in ikus060/rdiffwebEPSS 0.7%