Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2025-53806MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-54097MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-3881HIGHOut-of-bounds Read in bfabiszewski/libmobiEPSS 1.2%CVE-2025-54096MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-54095MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2022-20498MEDIUMIn fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inEPSS 1.2%CVE-2026-3731MEDIUMlibssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-boundsEPSS 1.2%CVE-2023-41360CRITICALAn issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream siEPSS 1.2%CVE-2020-11089LOWOut-of-bound read in FreeRDPEPSS 1.2%CVE-2021-34342—Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak.EPSS 1.1%CVE-2020-1893—Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM EPSS 1.1%CVE-2020-1888—Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affectEPSS 1.1%CVE-2024-40789MEDIUMAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9,EPSS 1.1%CVE-2024-47596MEDIUMGHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsingEPSS 1.1%CVE-2026-67633MEDIUMMicrosoft SQL Server Denial of Service VulnerabilityEPSS 1.1%CVE-2026-66308MEDIUMSkype for Business and Lync Denial of Service VulnerabilityEPSS 1.1%CVE-2022-44311HIGHhtml2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. ThEPSS 1.1%CVE-2024-47600MEDIUMGHSL-2024-248: GStreamer has an OOB-read in format_channel_maskEPSS 1.1%CVE-2022-21728HIGHOut of bounds read in TensorflowEPSS 1.1%CVE-2022-22674MEDIUMAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issEPSS 1.1%KEV