Weaknesses of type CWE-125

5,159 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2026-17701CRITICALInsufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromEPSS 0.3%CVE-2025-27184MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2023-2860MEDIUMOut-of-bounds read when setting hmac dataEPSS 0.3%CVE-2024-11581HIGHLuxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-27204MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2025-27201MEDIUMAnimate | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2025-27187MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2025-27202MEDIUMAnimate | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2020-27788—An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker witEPSS 0.3%CVE-2025-27186MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2023-44335MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability I.EPSS 0.3%CVE-2023-32360—An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, maEPSS 0.3%CVE-2023-44331MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability IV.EPSS 0.3%CVE-2023-44332MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability II.EPSS 0.3%CVE-2023-47077MEDIUMAdobe InDesign CC 2023 Memory Corruption Vulnerability VI.EPSS 0.3%CVE-2023-44333MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability V.EPSS 0.3%CVE-2023-44334MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability VI.EPSS 0.3%CVE-2024-31198MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.3%CVE-2026-5913HIGHOut of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a EPSS 0.3%CVE-2026-17995HIGHOut of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a cEPSS 0.3%