Weaknesses of type CWE-125

5,179 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2024-3933MEDIUMEclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a bufferEPSS 0.2%CVE-2021-47586MEDIUMnet: stmmac: dwmac-rk: fix oob read in rk_gmac_setupEPSS 0.2%CVE-2021-41224HIGH`SparseFillEmptyRows` heap OOB readEPSS 0.2%CVE-2024-7670HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.2%CVE-2021-29560LOWHeap buffer overflow in `RaggedTensorToTensor`EPSS 0.2%CVE-2021-41212HIGHHeap OOB read in `tf.ragged.cross`EPSS 0.2%CVE-2025-15412MEDIUMWebAssembly wabt wasm-decompile VarName out-of-boundsEPSS 0.2%CVE-2024-8588HIGHAutodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read VulnerabilityEPSS 0.2%CVE-2024-44134MEDIUMThis issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to reEPSS 0.2%CVE-2021-41211HIGHHeap OOB read in shape inference for `QuantizeV2`EPSS 0.2%CVE-2024-9827HIGHAutodesk AutoCAD ACTranslators CATPART File Parsing Out-Of-Bounds Read VulnerabilityEPSS 0.2%CVE-2024-8589HIGHAutodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read VulnerabilityEPSS 0.2%CVE-2021-41223HIGHHeap OOB read in `FusedBatchNorm` kernelsEPSS 0.2%CVE-2021-41226HIGHHeap OOB read in `SparseBinCount`EPSS 0.2%CVE-2026-16782MEDIUMSVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds MaxEPSS 0.2%CVE-2026-20620HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, EPSS 0.2%CVE-2024-50123HIGHbpf: Add the missing BPF_LINK_TYPE invocation for sockmapEPSS 0.2%CVE-2023-24475MEDIUMOut of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosuEPSS 0.2%CVE-2024-23802HIGHA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (AllEPSS 0.2%CVE-2024-47021MEDIUMIn sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to reEPSS 0.2%