Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2026-77886HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77893HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-68887HIGHWindows Message Queuing Queue Manager Denial of Service VulnerabilityEPSS 1.2%CVE-2026-69760HIGHWindows Kerberos Denial of Service VulnerabilityEPSS 1.2%CVE-2024-47776MEDIUMGHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunkEPSS 1.2%CVE-2024-47597MEDIUMGHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samplesEPSS 1.2%CVE-2024-47777MEDIUMGHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunkEPSS 1.2%CVE-2024-47775MEDIUMGHSL-2024-261: GStreamer has an OOB-read in parse_ds64EPSS 1.2%CVE-2021-40766LOWAdobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-22753—A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or EPSS 1.2%CVE-2024-38184HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2021-40769LOWAdobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.2%CVE-2022-41988MEDIUMAn information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.1EPSS 1.2%CVE-2017-9283—An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for furEPSS 1.2%CVE-2018-11727MEDIUMThe libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an EPSS 1.2%CVE-2018-11728MEDIUMThe libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attaEPSS 1.2%CVE-2023-21539HIGHWindows Authentication Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-0525HIGHOut-of-bounds Read in mruby/mrubyEPSS 1.2%CVE-2024-26003HIGHPHOENIX CONTACT: DoS of the control agent in CHARX SeriesEPSS 1.2%CVE-2023-24977HIGHApache InLong: Jdbc Connection causes arbitrary file reading in InLongEPSS 1.2%