Weaknesses of type CWE-125

5,226 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2025-20768HIGHIn display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliEPSS 0.1%CVE-2024-29742MEDIUMIn apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informEPSS 0.1%CVE-2024-29738MEDIUMIn gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no aEPSS 0.1%CVE-2018-9441MEDIUMIn sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local EPSS 0.1%CVE-2024-25989MEDIUMIn gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to locaEPSS 0.1%CVE-2023-40112MEDIUMIn ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclEPSS 0.1%CVE-2024-27234MEDIUMIn fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclEPSS 0.1%CVE-2024-27218MEDIUMIn update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosuEPSS 0.1%CVE-2024-29750MEDIUMIn km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disEPSS 0.1%CVE-2024-20136MEDIUMIn da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additioEPSS 0.1%CVE-2024-29782MEDIUMIn tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informEPSS 0.1%CVE-2024-29739MEDIUMIn tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disEPSS 0.1%CVE-2025-20662MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2025-20661MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2018-9435MEDIUMIn gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2018-9408MEDIUMIn m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead toEPSS 0.1%CVE-2024-27235MEDIUMIn plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information discloEPSS 0.1%CVE-2024-20091MEDIUMIn vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2024-29783MEDIUMIn tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosEPSS 0.1%CVE-2022-47323MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%