Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2026-57228HIGHSuricata smtp/mime: heap out-of-bounds read quoted-printable decoderEPSS 0.6%CVE-2025-33060MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-33065MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-21247HIGHWindows Hyper-V Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-4020CRITICALUnvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memoryEPSS 0.6%CVE-2024-36243HIGHArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityEPSS 0.6%CVE-2022-35938HIGHOOB read in `Gather_nd` op in TensorFlow Lite MicroEPSS 0.6%CVE-2026-28693HIGHImageMagick has an integer overflow in DIB coder can result in out of bounds read or writeEPSS 0.6%CVE-2026-34588HIGHOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteEPSS 0.6%CVE-2026-92925HIGHRedis: redis: out-of-bounds read via crafted cluster bus packetsEPSS 0.6%CVE-2026-84549HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TaEPSS 0.6%CVE-2023-0049HIGHOut-of-bounds Read in vim/vimEPSS 0.6%CVE-2026-73515HIGHPostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf BufferEPSS 0.6%CVE-2022-35937HIGHOOB read in `Gather_nd` op in TensorFlow LiteEPSS 0.6%CVE-2026-19643MEDIUMOut-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platformsEPSS 0.6%CVE-2024-24564LOWVyper extract32 can ready dirty memoryEPSS 0.6%CVE-2022-32842HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS MoEPSS 0.6%CVE-2026-28859MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS EPSS 0.6%CVE-2026-20829MEDIUMTPM Trustlet Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-20835MEDIUMCapability Access Management Service (camsvc) Information Disclosure VulnerabilityEPSS 0.6%