Weaknesses of type CWE-125
5,126 resultsLeitura fora dos limites de memória
Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.
Example
Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.
How to mitigate
Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.
CVE-2023-40576MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.2%CVE-1999-0029HIGHroot privileges via buffer overflow in ordist command on SGI IRIX systems.EPSS 1.2%CVE-2023-24900MEDIUMWindows NTLM Security Support Provider Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-21410HIGHOut-of-bounds read in the 6LoWPAN implementationEPSS 1.2%CVE-2023-4761HIGHOut of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer proEPSS 1.2%CVE-2023-36766HIGHMicrosoft Excel Information Disclosure VulnerabilityEPSS 1.2%CVE-2020-1919—Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer thanEPSS 1.2%CVE-2025-55225MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-36010LOWAdobe Illustrator SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-63650HIGHAn out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit f37e984 allows attackers to cause a Denial of EPSS 1.2%CVE-2025-63653HIGHAn out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial EPSS 1.2%CVE-2025-63657HIGHAn out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a DenialEPSS 1.2%CVE-2025-63656HIGHAn out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial ofEPSS 1.2%CVE-2022-46393CRITICALAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffeEPSS 1.2%CVE-2022-28682HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaEPSS 1.2%CVE-2022-28661—A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds read pEPSS 1.2%CVE-2026-69329HIGHBranchCache Denial of Service VulnerabilityEPSS 1.2%CVE-2021-26926—A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of informEPSS 1.2%CVE-2020-16236—anasonic FPWIN ProEPSS 1.2%CVE-2021-22655—Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a EPSS 1.2%