Weaknesses of type CWE-125

6,000 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2021-43845HIGHPrevent out-of-bounds read in PJSIPEPSS 3.9%CVE-2018-16230CRITICALThe BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).EPSS 3.9%CVE-2018-14882CRITICALThe ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.EPSS 3.9%CVE-2018-17700—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%CVE-2019-13325HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interacEPSS 3.9%CVE-2020-27840—A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings witEPSS 3.9%CVE-2018-17693—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%CVE-2013-2805—Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPREPSS 3.9%CVE-2018-17701—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%CVE-2019-13324HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interacEPSS 3.9%CVE-2019-13513—In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-oEPSS 3.9%CVE-2020-17427HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 3.8%CVE-2022-47943HIGHAn issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITEEPSS 3.8%CVE-2022-23123MEDIUMThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not reEPSS 3.8%CVE-2024-0519HIGHOut of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption EPSS 3.8%KEVCVE-2021-28574MEDIUMAdobe Animate out-of-bounds read vulnerability could lead to information exposureEPSS 3.8%CVE-2021-28575MEDIUMAdobe Animate out-of-bounds read vulnerability could lead to information exposureEPSS 3.8%CVE-2025-12036HIGHOut of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access EPSS 3.7%CVE-2018-16228CRITICALThe HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().EPSS 3.7%CVE-2018-19004—LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data EPSS 3.7%