Weaknesses of type CWE-125

5,226 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2025-20776MEDIUMIn display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliEPSS 0.1%CVE-2024-56184MEDIUMIn static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inEPSS 0.1%CVE-2024-20116MEDIUMIn cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2024-40656MEDIUMIn handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused EPSS 0.1%CVE-2023-48344MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%CVE-2023-52536MEDIUMIn faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SysEPSS 0.1%CVE-2024-56187MEDIUMIn ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could leEPSS 0.1%CVE-2024-56186MEDIUMIn closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local EPSS 0.1%CVE-2023-48347MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%CVE-2023-48341MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%CVE-2023-48345MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%CVE-2018-9449MEDIUMIn process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds check. This could leadEPSS 0.1%CVE-2024-27230MEDIUMIn ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds checEPSS 0.1%CVE-2024-56185MEDIUMIn ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds chEPSS 0.1%CVE-2026-0076HIGHIn validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escaEPSS 0.1%CVE-2024-20055MEDIUMIn imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with SyEPSS 0.1%CVE-2024-32920HIGHIn set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatiEPSS 0.1%CVE-2024-20123MEDIUMIn vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with SysteEPSS 0.1%CVE-2024-20124MEDIUMIn vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with SysteEPSS 0.1%CVE-2024-20122MEDIUMIn vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with SysteEPSS 0.1%