Weaknesses of type CWE-125

5,131 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2026-3622HIGHDenial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841NEPSS 0.7%CVE-2024-25201HIGHEspruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c.EPSS 0.7%CVE-2022-40663HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. UEPSS 0.7%CVE-2024-40780MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.EPSS 0.7%CVE-2024-21639MEDIUMOOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemoryEPSS 0.7%CVE-2025-21341MEDIUMWindows Digital Media Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-65364HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TaEPSS 0.7%CVE-2022-47881MEDIUMFoxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.EPSS 0.7%CVE-2025-20152HIGHISE restartEPSS 0.7%CVE-2025-12183HIGHorg.lz4:lz4-java - Out-of-Bounds Memory AccessEPSS 0.7%CVE-2024-39882HIGHOut-of-bounds Read in Delta Electronics CNCSoft-G2EPSS 0.7%CVE-2020-26269—Heap out of bounds read in filesystem glob matching in TensorFlowEPSS 0.7%CVE-2024-6102HIGHOut of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruptioEPSS 0.7%CVE-2026-66033HIGHlibssh2 Integer Underflow DoS via AES-GCM Cipher NegotiationEPSS 0.7%CVE-2024-54506CRITICALAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be ablEPSS 0.7%CVE-2022-32841MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS MonterEPSS 0.7%CVE-2025-48822HIGHWindows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-38117HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-47250MEDIUMApache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound accessEPSS 0.7%CVE-2024-26217MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%