Weaknesses of type CWE-125
5,159 resultsLeitura fora dos limites de memória
Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.
Example
Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.
How to mitigate
Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.
CVE-2024-5159HIGHHeap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via EPSS 0.6%CVE-2021-35369—Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtEPSS 0.6%CVE-2020-26998—A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected appliEPSS 0.6%CVE-2026-69679MEDIUMWindows DHCP Server Denial of Service VulnerabilityEPSS 0.6%CVE-2026-69637MEDIUMWindows DHCP Server Denial of Service VulnerabilityEPSS 0.6%CVE-2025-53014LOWImageMagick has Heap Buffer Overflow in InterpretImageFilenameEPSS 0.6%CVE-2026-25646HIGHLIBPNG has a heap buffer overflow in png_set_quantizeEPSS 0.6%CVE-2022-38403HIGHAdobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-60727HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2022-36052MEDIUMOut-of-bounds read when decompressing UDP headerEPSS 0.6%CVE-2024-52523MEDIUMNextcloud Server Custom defined credentials of external storages are sent back to the frontendEPSS 0.6%CVE-2023-30546CRITICALContiki-NG has off-by-one error in Antelope DBMSEPSS 0.6%CVE-2024-26175HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2021-37203—A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapteEPSS 0.6%CVE-2025-11021HIGHLibsoup: out-of-bounds read in cookie date handling of libsoup http libraryEPSS 0.6%CVE-2021-25487HIGHLack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it resEPSS 0.6%KEVCVE-2021-20024—Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability orEPSS 0.6%CVE-2023-25738MEDIUMMembers of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid valuEPSS 0.6%CVE-2024-43508MEDIUMWindows Graphics Component Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-66409LOWESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command HandlingEPSS 0.6%