Weaknesses of type CWE-125

5,136 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2024-3855MEDIUMIn certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 12EPSS 0.4%CVE-2022-41661HIGHA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), TeamceEPSS 0.4%CVE-2023-39192MEDIUMKernel: netfilter: xtables out-of-bounds read in u32_match_it()EPSS 0.4%CVE-2023-47068HIGHZDI-CAN-21702: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-47069HIGHZDI-CAN-21703: Adobe After Effects M4A File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-47067HIGHZDI-CAN-21706: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-51562LOWFoxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-51555LOWFoxit PDF Reader Doc Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-40550MEDIUMShim: out-of-bound read in verify_buffer_sbat()EPSS 0.4%CVE-2023-51558LOWFoxit PDF Reader AcroForm Doc Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-40551MEDIUMShim: out of bounds read when parsing mz binariesEPSS 0.4%CVE-2023-38217MEDIUMZDI-CAN-21403: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-27346LOWKofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2018-9430CRITICALIn prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code exeEPSS 0.4%CVE-2026-64833HIGHFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.cEPSS 0.4%CVE-2024-7511LOWTrimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-21536MEDIUMEvent Tracing for Windows Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-42755MEDIUMKernel: rsvp: out-of-bounds read in rsvp_classify()EPSS 0.4%CVE-2024-36999HIGHMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based productsEPSS 0.4%CVE-2026-24481HIGHImageMagick has Possible Heap Information Disclosure in PSD ZIP DecompressionEPSS 0.4%