Weaknesses of type CWE-125

5,159 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2026-48111MEDIUMGHSL-2026-121 7-Zip UEFI DEPEX OOB ReadEPSS 0.3%CVE-2026-48103MEDIUMGHSL-2026-119 7-Zip WIM SecurityId OOB readEPSS 0.3%CVE-2024-20766MEDIUMAdobe Indesign 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure VulnerabiityEPSS 0.3%CVE-2023-44325MEDIUMZDI-CAN-21666: Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-23935MEDIUMUse-after-free read in script item/preprocessing HttpRequest bodyEPSS 0.3%CVE-2022-46457MEDIUMNASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.EPSS 0.3%CVE-2024-40779MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.EPSS 0.3%CVE-2025-49175MEDIUMXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsEPSS 0.3%CVE-2025-69806HIGHp2r3 bareiron commit: 8e4d4020d contains an Out-of-bounds Read, which allows unauthenticated remote attackers to get relative information leEPSS 0.3%CVE-2024-40806MEDIUMAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and EPSS 0.3%CVE-2025-24228HIGHA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS VEPSS 0.3%CVE-2023-4042MEDIUMGhostscript: incomplete fix for cve-2020-16305EPSS 0.3%CVE-2025-11714HIGHMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144EPSS 0.3%CVE-2023-22347HIGHOut-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verifieEPSS 0.3%CVE-2023-22349HIGHOut-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verifieEPSS 0.3%CVE-2024-49549MEDIUMInDesign Desktop | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2024-49548MEDIUMInDesign Desktop | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2024-49541MEDIUMIllustrator | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2023-22346HIGHOut-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verifieEPSS 0.3%CVE-2024-49546MEDIUMInDesign Desktop | Out-of-bounds Read (CWE-125)EPSS 0.3%