Weaknesses of type CWE-125

5,225 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2023-21009MEDIUMIn multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2023-20968MEDIUMIn multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2023-20969MEDIUMIn multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2023-20989MEDIUMIn btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check. This could leaEPSS 0.1%CVE-2023-21010MEDIUMIn multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2024-20085MEDIUMIn power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System EPSS 0.1%CVE-2026-104037MEDIUMSssd: sssd: denial of service via packet length underflow in autofs responderEPSS 0.1%CVE-2024-21950LOWAn out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of establEPSS 0.1%CVE-2023-21032MEDIUMIn _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to locaEPSS 0.1%CVE-2024-27220HIGHIn lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation oEPSS 0.1%CVE-2026-104043MEDIUMSssd: sssd: denial of service via undersized packet parsing in nss responderEPSS 0.1%CVE-2026-24921MEDIUMAddress read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiaEPSS 0.1%CVE-2023-20973MEDIUMIn btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lEPSS 0.1%CVE-2023-20974MEDIUMIn btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. ThEPSS 0.1%CVE-2023-21208—In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to locaEPSS 0.1%CVE-2026-73075MEDIUMVim: Out-of-bounds Access in Popup Opacity HandlingEPSS 0.1%CVE-2023-20977MEDIUMIn btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This coEPSS 0.1%CVE-2023-21048MEDIUMIn handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discloEPSS 0.1%CVE-2025-48596HIGHIn appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of prEPSS 0.1%CVE-2023-20728MEDIUMIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%