Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2022-43640LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. UseEPSS 0.9%CVE-2020-13601CRITICALPossible read out of bounds in dns readEPSS 0.9%CVE-2024-47543MEDIUMGHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_containerEPSS 0.9%CVE-2024-47602MEDIUMGHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxerEPSS 0.9%CVE-2026-80082MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80088MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-55054MEDIUMMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-70327MEDIUMMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-57979MEDIUMWindows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-69550MEDIUMWindows App for Mac Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78503MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-54126MEDIUMWindows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-69739MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-69734MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80090MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-72975MEDIUMMicrosoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80086MEDIUMMicrosoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80076MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-61921MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80073MEDIUMMicrosoft Office Outlook Information Disclosure VulnerabilityEPSS 0.9%