Weaknesses of type CWE-125

5,130 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2021-31431MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2021-31432MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2026-2443MEDIUMLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosureEPSS 0.4%CVE-2022-46317HIGHThe power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availaEPSS 0.4%CVE-2023-42045HIGHPDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42055HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-55045HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42063HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42044HIGHPDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42060HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42042HIGHPDF-XChange Editor App Object Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-39775MEDIUMNet Manager has an out-of-bounds read permission bypass vulnerabilityEPSS 0.4%CVE-2023-42057HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42064HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-28832HIGHAdobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-43916HIGHpam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walkerEPSS 0.4%CVE-2026-20346HIGHClamAV PDF File Format Processing Memory Corruption VulnerabilityEPSS 0.4%CVE-2026-24818MEDIUMA heap-based buffer over-read that might affect a system that compiles untrusted Lua code in praydog/UEVREPSS 0.4%CVE-2026-65918HIGHPyTorch torchvision GIF Decoder Out-of-bounds Heap ReadEPSS 0.4%CVE-2026-55777MEDIUMGoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoSEPSS 0.4%