Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2024-44912HIGHNASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).EPSS 0.5%CVE-2026-66360HIGHMZ Automation libiec61850 Out-of-bounds ReadEPSS 0.5%CVE-2024-44460HIGHAn invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).EPSS 0.5%CVE-2023-42095LOWFoxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-56017HIGHJavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slashEPSS 0.5%CVE-2026-40454HIGHApache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server dataEPSS 0.5%CVE-2026-48138HIGHOut-of-bounds read vulnerability in the NI grpc-device streaming APIEPSS 0.5%CVE-2023-38678MEDIUMSegfault in paddle.modeEPSS 0.5%CVE-2026-38570HIGHbacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service.EPSS 0.5%CVE-2025-2753MEDIUMOpen Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-boundsEPSS 0.5%CVE-2023-37240— Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may causeEPSS 0.5%CVE-2022-46320CRITICALThe kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.EPSS 0.5%CVE-2024-36124MEDIUMiq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crashEPSS 0.5%CVE-2024-9246LOWFoxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-31174MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2024-31173MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2024-31168MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2026-20936MEDIUMWindows NDIS Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-31172MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2024-31169MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%