Weaknesses of type CWE-125

5,105 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2025-21246HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-46651LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.7%CVE-2021-46650LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.7%CVE-2021-46649LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.7%CVE-2021-29473LOWOut-of-bounds read in Exiv2::Jp2Image::doWriteMetadataEPSS 1.7%CVE-2020-27299—The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information oEPSS 1.7%CVE-2021-42525LOWAdobe Animate SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.7%CVE-2020-11098LOWOut-of-bound read in glyph_cache_put in FreeRDPEPSS 1.7%CVE-2021-33643MEDIUMAn attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable EPSS 1.7%CVE-2021-34294—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll libEPSS 1.7%CVE-2021-34292—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll liEPSS 1.7%CVE-2024-37342HIGHMicrosoft SQL Server Native Scoring Information Disclosure VulnerabilityEPSS 1.7%CVE-2021-34315—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll libEPSS 1.7%CVE-2021-34296—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll libEPSS 1.7%CVE-2021-40812MEDIUMThe GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return valuEPSS 1.7%CVE-2023-6121MEDIUMKernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_getEPSS 1.7%CVE-2021-46610LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.7%CVE-2023-21702HIGHWindows iSCSI Service Denial of Service VulnerabilityEPSS 1.7%CVE-2021-34890LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User inteEPSS 1.7%CVE-2021-34888LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User inteEPSS 1.6%