Weaknesses of type CWE-125

5,105 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2022-32912HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. ProceEPSS 1.5%CVE-2020-11095LOWGlobal OOB read in update_recv_primary_order in FreeRDPEPSS 1.5%CVE-2021-32938—Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of pEPSS 1.4%CVE-2021-44700LOWAdobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-32715MEDIUMRemote Desktop Protocol Client Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-53805HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.4%CVE-2023-39180MEDIUMKernel: ksmbd: read request memory leak denial-of-service vulnerabilityEPSS 1.4%CVE-2020-16201—Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited bEPSS 1.4%CVE-2022-0319MEDIUMOut-of-bounds Read in vim/vimEPSS 1.4%CVE-2018-6340HIGHThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached EPSS 1.4%CVE-2023-21691HIGHMicrosoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure VulnerabilityEPSS 1.4%CVE-2020-11086LOWOut-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`EPSS 1.4%CVE-2020-11087LOWOut-of-bounds Read in FreeRDPEPSS 1.4%CVE-2021-31506LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6EPSS 1.4%CVE-2018-20618HIGHok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.EPSS 1.4%CVE-2020-11097LOWOOB read in ntlm_av_pair_get in FreeRDPEPSS 1.4%CVE-2025-29960MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2022-2881MEDIUMBuffer overread in statistics channel codeEPSS 1.4%CVE-2021-43752LOWAdobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.4%CVE-2022-2257HIGHOut-of-bounds Read in vim/vimEPSS 1.4%