Weaknesses of type CWE-125
5,220 resultsLeitura fora dos limites de memória
Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.
Example
Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.
How to mitigate
Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.
CVE-2022-25663MEDIUMPossible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon CompEPSS 0.1%CVE-2025-15614MEDIUMugrep before 7.6.0 Heap Buffer Over-read via .Z decompressionEPSS 0.1%CVE-2026-17072LOWGstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containersEPSS 0.1%CVE-2022-25676MEDIUMInformation disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer EPSS 0.1%CVE-2026-18747MEDIUMInteger underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds readEPSS 0.1%CVE-2021-0584MEDIUMIn verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local inEPSS 0.1%CVE-2024-32482LOWTillitis TKey Signer possible RAM disclosure vulnerabilityEPSS 0.1%CVE-2026-96546LOWGimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loaderEPSS 0.1%CVE-2025-5941LOWOut-of-Bounds Read Vulnerability in Netskope ClientEPSS 0.1%CVE-2026-16172MEDIUMNetskope Endpoint DLP Service Out-of-Bounds Read Leading to Process CrashEPSS 0.1%CVE-2023-21049MEDIUMIn append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to locEPSS 0.1%CVE-2026-20447MEDIUMIn geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege ifEPSS 0.1%CVE-2022-39089MEDIUMIn mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SysteEPSS 0.1%CVE-2026-10233MEDIUMAssimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-boundsEPSS 0.1%CVE-2024-56807LOWMedia Streaming add-onEPSS 0.1%CVE-2022-40519MEDIUMBuffer over-read in CoreEPSS 0.1%CVE-2022-40518MEDIUMBuffer overread in CoreEPSS 0.1%CVE-2025-2509HIGHOut-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvEPSS 0.1%CVE-2025-66664MEDIUMInsufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_IDEPSS 0.1%CVE-2026-14256MEDIUMELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a lEPSS 0.1%