Weaknesses of type CWE-125

5,126 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2026-20835MEDIUMCapability Access Management Service (camsvc) Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-25178CRITICALLuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.EPSS 0.6%CVE-2024-11614HIGHDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryEPSS 0.6%CVE-2026-34608MEDIUMnanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB ReadEPSS 0.6%CVE-2025-55100LOWPotential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()EPSS 0.6%CVE-2022-42342MEDIUMAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.6%CVE-2022-41580CRITICALThe HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousEPSS 0.6%CVE-2024-5991CRITICALBuffer overread in domain name matchingEPSS 0.6%CVE-2026-10817MEDIUMInsufficient input validation leading to memory overreadEPSS 0.6%CVE-2023-45682MEDIUMWild address read in vorbis_decode_packet_rest in stb_vorbisEPSS 0.6%CVE-2026-45485LOWMicrosoft Office Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-44237MEDIUMAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, mEPSS 0.6%CVE-2024-44283MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS VenEPSS 0.6%CVE-2022-38436HIGHAdobe Illustrator CDR File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-28448MEDIUMVersionize is lacking bound checks, potentially leading to out of bounds memory accessEPSS 0.6%CVE-2022-1354—A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a cEPSS 0.6%CVE-2024-39695MEDIUMExiv2 has an out-of-bounds read in AsfVideo::streamPropertiesEPSS 0.6%CVE-2022-32852HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciousEPSS 0.6%CVE-2024-20505MEDIUMClamAV Memory Handling DoSEPSS 0.6%CVE-2024-31029HIGHAn issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause aEPSS 0.6%