Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2022-35926MEDIUMOut-of-bounds read in IPv6 neighbor solicitation in Contiki-NGEPSS 1.2%CVE-2023-21798HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-40656HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 13.2.0.21165. UsEPSS 1.2%CVE-2025-24256CRITICALThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. AEPSS 1.2%CVE-2022-31045HIGHIll-formed headers may lead to unexpected behavior in IstioEPSS 1.2%CVE-2024-32659CRITICALfreerdp_image_copy out of bound readEPSS 1.2%CVE-2026-6918HIGHIn Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.EPSS 1.2%CVE-2021-47308HIGHscsi: libfc: Fix array index out of bound exceptionEPSS 1.2%CVE-2026-41604HIGHApache Thrift: Swift Range crash in skip()EPSS 1.2%CVE-2026-84001HIGHWindows Key Distribution Center Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77501HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-69760HIGHWindows Kerberos Denial of Service VulnerabilityEPSS 1.2%CVE-2026-50496HIGHWindows Network Policy Server SNMP Information Disclosure VulnerabilityEPSS 1.2%CVE-2026-77502HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77886HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77895HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-33096HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77498HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-83989HIGHWindows Services for NFS ONCRPC XDR Driver Denial of Service VulnerabilityEPSS 1.2%CVE-2026-69342HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%