Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2026-61924MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-58539MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78522MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78515MEDIUMMicrosoft Office Excel Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-77911MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-69734MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-72942MEDIUMWindows Spaceport.sys Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80090MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78520MEDIUMMicrosoft Office Outlook Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80084MEDIUMMicrosoft Office Outlook Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80073MEDIUMMicrosoft Office Outlook Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78441MEDIUMWindows OLE DB Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80079MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-80088MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-69550MEDIUMWindows App for Mac Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78502MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2022-0717MEDIUMOut-of-bounds Read in mruby/mrubyEPSS 0.9%CVE-2021-44008—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_LoadeEPSS 0.9%CVE-2021-44010—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_LoadeEPSS 0.9%CVE-2021-44004—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_LoadeEPSS 0.9%