Fallos del tipo CWE-125

5126 resultados

Leitura fora dos limites do buffer

Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.

Ejemplo

Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.

Cómo mitigar

Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).

CVE-2024-44912HIGHNASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).EPSS 0.5%CVE-2026-66360HIGHMZ Automation libiec61850 Out-of-bounds ReadEPSS 0.5%CVE-2024-44460HIGHAn invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).EPSS 0.5%CVE-2023-42095LOWFoxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-56017HIGHJavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slashEPSS 0.5%CVE-2026-40454HIGHApache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server dataEPSS 0.5%CVE-2026-48138HIGHOut-of-bounds read vulnerability in the NI grpc-device streaming APIEPSS 0.5%CVE-2023-38678MEDIUMSegfault in paddle.modeEPSS 0.5%CVE-2026-38570HIGHbacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service.EPSS 0.5%CVE-2025-2753MEDIUMOpen Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-boundsEPSS 0.5%CVE-2023-37240— Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may causeEPSS 0.5%CVE-2022-46320CRITICALThe kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.EPSS 0.5%CVE-2024-36124MEDIUMiq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crashEPSS 0.5%CVE-2024-9246LOWFoxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-31174MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2024-31173MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2024-31168MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2026-20936MEDIUMWindows NDIS Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-31172MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%CVE-2024-31169MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.5%