Weaknesses of type CWE-125

5,105 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2025-21178HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.6%CVE-2022-32799MEDIUMAn out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS MonEPSS 1.6%CVE-2021-4166HIGHOut-of-bounds Read in vim/vimEPSS 1.6%CVE-2023-39354MEDIUMFreeRDP Out-Of-Bounds Read in nsc_rle_decompress_dataEPSS 1.6%CVE-2022-1276HIGHOut-of-bounds Read in mrb_get_args in mruby/mrubyEPSS 1.6%CVE-2023-6377HIGHXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsEPSS 1.6%CVE-2021-42387—Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 1EPSS 1.6%CVE-2021-42388—Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 1EPSS 1.6%CVE-2021-3643—A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker toEPSS 1.6%CVE-2021-29470MEDIUMOut-of-bounds read in Exiv2::Jp2Image::encodeJp2HeaderEPSS 1.6%CVE-2024-38214MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.6%CVE-2021-29458—Out-of-bounds read in Exiv2::Internal::CrwMap::encodeEPSS 1.6%CVE-2022-2126HIGHOut-of-bounds Read in vim/vimEPSS 1.6%CVE-2019-1853MEDIUMCisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read VulnerabilityEPSS 1.6%CVE-2024-48208HIGHpure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.EPSS 1.6%CVE-2025-49796CRITICALLibxml: type confusion leads to denial of service (dos)EPSS 1.6%CVE-2025-9230HIGHOut-of-bounds read & write in RFC 3211 KEK UnwrapEPSS 1.6%CVE-2020-12403—A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could causeEPSS 1.5%CVE-2022-24055LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. UEPSS 1.5%CVE-2022-24060LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. UEPSS 1.5%