Weaknesses of type CWE-125

5,099 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2020-17427HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 3.7%CVE-2017-13028CRITICALThe BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().EPSS 3.6%CVE-2021-28576MEDIUMAdobe Animate out-of-bounds read vulnerability could lead to information exposureEPSS 3.6%CVE-2018-14819—Fuji Electric V-Server 4.0.3.0 and prior, An out-of-bounds read vulnerability has been identified, which may allow remote code execution.EPSS 3.6%CVE-2020-27737MEDIUMA vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <EPSS 3.6%CVE-2020-10901LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. UserEPSS 3.6%CVE-2018-10623—Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positiEPSS 3.5%CVE-2019-25013MEDIUMThe iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR eEPSS 3.5%CVE-2018-10598—CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to cEPSS 3.5%CVE-2022-47943HIGHAn issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITEEPSS 3.5%CVE-2024-36251HIGHThe web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafteEPSS 3.5%CVE-2020-10903LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. UserEPSS 3.5%CVE-2020-10905LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. UserEPSS 3.5%CVE-2019-6765HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interEPSS 3.5%CVE-2021-21050HIGHAdobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 3.5%CVE-2021-21049HIGHAdobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 3.5%CVE-2017-12902CRITICALThe Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.EPSS 3.5%CVE-2017-13024CRITICALThe IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().EPSS 3.5%CVE-2017-12985CRITICALThe IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().EPSS 3.5%CVE-2017-13010CRITICALThe BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().EPSS 3.5%