Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2025-52871LOWLicense CenterEPSS 0.6%CVE-2025-30376HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-43773CRITICALAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TEPSS 0.6%CVE-2026-21900HIGHCryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok PatternEPSS 0.6%CVE-2024-30347LOWFoxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-26675HIGHWindows Subsystem for Linux Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2022-1738HIGHFuji Electric D300win Out-of-bounds ReadEPSS 0.6%CVE-2025-33062MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-9249HIGHFoxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-47993MEDIUMA Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.EPSS 0.6%CVE-2025-33055MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2022-40647HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2024-30401HIGHJunos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftmanEPSS 0.6%CVE-2022-40640HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-0284—A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggereEPSS 0.6%CVE-2025-60726HIGHMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-3406MEDIUMNothings stb Header Array stbhw_build_tileset_from_image out-of-boundsEPSS 0.6%CVE-2026-10672HIGHUnterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)EPSS 0.6%CVE-2025-54902HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-54898HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%