目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CWE-131 缓冲区大小计算不正确 类漏洞列表 109

CWE-131 缓冲区大小计算不正确 类弱点 109 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-131属于内存安全类漏洞，指产品在分配缓冲区时未能正确计算所需大小。攻击者通常利用此缺陷触发缓冲区溢出，进而执行恶意代码或导致系统崩溃。开发者应避免此类风险，需严格验证输入长度，使用安全的内存分配函数，并确保在分配前准确计算缓冲区大小，同时实施边界检查以防止越界访问。

MITRE CWE 官方描述
CWE：CWE-131 缓冲区大小计算错误 (Incorrect Calculation of Buffer Size) 英文：产品在分配缓冲区时未能正确计算所需的大小，这可能导致缓冲区溢出 (buffer overflow)。
常见影响 (1)
Integrity, Availability, Confidentiality DoS: Crash, Exit, or Restart, Execute Unauthorized Code or Commands, Read Memory, Modify Memory
If the incorrect calculation is used in the context of memory allocation, then the software may create a buffer that is smaller or larger than expected. If the allocated buffer is smaller than expected, this could lead to an out-of-bounds read or write (CWE-119), possibly causing a crash, allowing a…
缓解措施 (5)
Implementation When allocating a buffer for the purpose of transforming, converting, or encoding an input, allocate enough memory to handle the largest possible encoding. For example, in a routine that converts "&" characters to "&" for HTML entity encoding, the output buffer needs to be at least 5 times as large as the input buffer.
Implementation Understand the programming language's underlying representation and how it interacts with numeric calculation (CWE-681). Pay close attention to byte size discrepancies, precision, signed/unsigned distinctions, truncation, conversion and casting between types, "not-a-number" calculations, and how the language handles numbers that are too large or too small for its underlying representation. [REF-7]…
Implementation Perform input validation on any numeric input by ensuring that it is within the expected range. Enforce that the input meets both the minimum and maximum requirements for the expected range.
Architecture and Design For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks entirely. Then, these modified values would be submitted to the server.
Implementation When processing structured incoming data containing a size field followed by raw data, identify and resolve any inconsistencies between the size field and the actual size of the data (CWE-130).
代码示例 (2)
The following code allocates memory for a maximum number of widgets. It then gets a user-specified number of widgets, making sure that the user does not request too many. It then initializes the elements of the array using InitializeWidget(). Because the number of widgets can vary for each request, the code inserts a NULL pointer to signify the location of the last widget.
int i; unsigned int numWidgets; Widget **WidgetList; numWidgets = GetUntrustedSizeValue(); if ((numWidgets == 0) || (numWidgets > MAX_NUM_WIDGETS)) { ExitError("Incorrect number of widgets requested!"); } WidgetList = (Widget **)malloc(numWidgets * sizeof(Widget *)); printf("WidgetList ptr=%p\n", WidgetList); for(i=0; i<numWidgets; i++) { WidgetList[i] = InitializeWidget(); } WidgetList[numWidgets] = NULL; showWidgets(WidgetList);
Bad · C
The following image processing code allocates a table for images.
img_t table_ptr; /*struct containing img data, 10kB each*/ int num_imgs; ... num_imgs = get_num_imgs(); table_ptr = (img_t*)malloc(sizeof(img_t)*num_imgs); ...
Bad · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-104424 Zebra 6.1.0 前 getblocktemplate 块大小计算错误漏洞 — zebra 3.7 Low 2026-10-02
CVE-2026-102505 Perl Imager 1.037前堆缓冲区溢出漏洞 - - 2026-10-01
CVE-2026-47578 NVIDIA Windows驱动内核缓冲区计算错误致代码执行 — GeForce 7.8 High 2026-09-30
CVE-2026-102729 OpenGFX主题加载函数越界写漏洞 — GUIX 5.9 Medium 2026-09-29
CVE-2026-13466 VAB认证中的单位混淆漏洞 — Trusted Firmware 8.1 High 2026-09-24
CVE-2026-88830 BusyBox TLS Montgomery归约堆溢出漏洞 — Red Hat Hardened Images 7.5 High 2026-09-23
CVE-2026-54692 SAIL XBM解码器堆溢出写入漏洞 — sail 7.8 High 2026-09-17
CVE-2026-91962 FreeRDP 缓冲区错误漏洞 — FreeRDP 6.3 Medium 2026-09-15
CVE-2026-47773 arduino-libraries ArduinoBLE 缓冲区错误漏洞 — ArduinoBLE 7.2 High 2026-09-11
CVE-2026-69598 Microsoft Windows iSCSI 缓冲区错误漏洞 — Windows 10 Version 1607 8.8 High 2026-09-08
CVE-2026-78221 OpenVPN 缓冲区错误漏洞 — OpenVPN 5.9 Medium 2026-09-07
CVE-2026-18743 rpm-software-management popt 缓冲区错误漏洞 — popt 2.5 Low 2026-09-01
CVE-2026-78002 Rsyslog 缓冲区错误漏洞 — Red Hat Enterprise Linux 10 7.5 High 2026-08-27
CVE-2026-44254 Wazuh 缓冲区错误漏洞 — wazuh 5.3 Medium 2026-08-19
CVE-2026-75093 Sonos tract 缓冲区错误漏洞 — tract 4.3 Medium 2026-08-18
CVE-2026-70457 RsyncProject Rsync 缓冲区错误漏洞 — rsync 6.5 Medium 2026-08-13
CVE-2026-42170 GIMP DDS 缓冲区错误漏洞 — Red Hat Enterprise Linux 6 7.8 High 2026-08-08
CVE-2026-42169 GIMP 缓冲区错误漏洞 — Red Hat Enterprise Linux 9 7.3 High 2026-08-04
CVE-2026-45812 Apache NimBLE 缓冲区错误漏洞 — Apache NimBLE - - 2026-07-24
CVE-2026-45784 rust-openssl 缓冲区错误漏洞 — rust-openssl - - 2026-07-17
CVE-2026-55827 FreeRDP 缓冲区错误漏洞 — FreeRDP 7.5 High 2026-07-10
CVE-2026-0280 Palo Alto Networks Cloud NGFW 缓冲区错误漏洞 — Cloud NGFW 1.7 Low 2026-07-09
CVE-2026-46521 ImageMagick 安全漏洞 — ImageMagick 5.5 Medium 2026-06-10
CVE-2026-11604 OpenVPN ovpn-dco-win 安全漏洞 — ovpn-dco-win - - 2026-06-10
CVE-2026-42915 Microsoft Windows TCP/IP 安全漏洞 — Windows 10 Version 21H2 5.5 Medium 2026-06-09
CVE-2026-40618 F5 BIG-IP 安全漏洞 — BIG-IP 7.5 High 2026-05-13
CVE-2026-44223 vLLM 安全漏洞 — vllm 6.5 Medium 2026-05-12
CVE-2026-1949 Delta Electronics AS320T 安全漏洞 — AS320T 9.8 Critical 2026-04-24
CVE-2026-41197 Noir 安全漏洞 — noir 9.8AI Critical AI 2026-04-23
CVE-2026-40918 GIMP 安全漏洞 — Red Hat Enterprise Linux 6 5.5 Medium 2026-04-15

CWE-131（缓冲区大小计算不正确） 是常见的弱点类别，本平台收录该类弱点关联的 109 条 CVE 漏洞。