Weaknesses of type CWE-125
5,177 resultsLeitura fora dos limites de memória
Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.
Example
Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.
How to mitigate
Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.
CVE-2023-32357—An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOEPSS 0.2%CVE-2023-32389—This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvEPSS 0.2%CVE-2025-68382MEDIUMPacketbeat Out-of-bounds ReadEPSS 0.2%CVE-2023-0180HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or informatEPSS 0.2%CVE-2024-40816MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS VEPSS 0.2%CVE-2022-3170—An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did notEPSS 0.2%CVE-2025-30306MEDIUMXMPWorker | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2023-34256MEDIUMAn issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/suEPSS 0.2%CVE-2026-71402MEDIUMwicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total lengthEPSS 0.2%CVE-2025-30309MEDIUMXMPWorker | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2023-27929MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOEPSS 0.2%CVE-2025-61839HIGHFormat Plugins | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2023-32372MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5,EPSS 0.2%CVE-2021-47126HIGHipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptionsEPSS 0.2%CVE-2026-11091HIGHInappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds EPSS 0.2%CVE-2024-2884MEDIUMOut of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory acceEPSS 0.2%CVE-2025-53055MEDIUMVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions thEPSS 0.2%CVE-2025-53065MEDIUMVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions thEPSS 0.2%CVE-2023-32363—A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An apEPSS 0.2%CVE-2026-48104MEDIUMGHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap readEPSS 0.2%