Weaknesses of type CWE-125

5,105 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2021-3998HIGHA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage andEPSS 1.8%CVE-2022-28268LOWAdobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.8%CVE-2022-0400—An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.EPSS 1.8%CVE-2021-4156—An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (vEPSS 1.8%CVE-2021-4193MEDIUMOut-of-bounds Read in vim/vimEPSS 1.8%CVE-2019-14906HIGHA flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red HatEPSS 1.8%CVE-2021-22668—Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bEPSS 1.8%CVE-2020-27843—A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion oEPSS 1.8%CVE-2022-28830MEDIUMAdobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.7%CVE-2021-44182LOWAdobe Dimension SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.7%CVE-2021-43763LOWAdobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.7%CVE-2025-22226HIGHVMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actorEPSS 1.7%KEVCVE-2023-36905MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.7%CVE-2022-0128HIGHOut-of-bounds Read in vim/vimEPSS 1.7%CVE-2020-27336LOWAn issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unaEPSS 1.7%CVE-2020-5235MEDIUMOut-of-memory condition in Nanopb is potentially exploitableEPSS 1.7%CVE-2022-2127MEDIUMSamba: out-of-bounds read in winbind auth_crapEPSS 1.7%CVE-2025-5318MEDIUMLibssh: out-of-bounds read in sftp_handle()EPSS 1.7%CVE-2020-11047MEDIUMOut-of-bounds Read in FreeRDPEPSS 1.7%CVE-2021-46607LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.7%