Fallos del tipo CWE-125
5130 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2021-31431MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2021-31432MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2026-2443MEDIUMLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosureEPSS 0.4%CVE-2022-46317HIGHThe power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availaEPSS 0.4%CVE-2023-42045HIGHPDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42055HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-55045HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42063HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42044HIGHPDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42060HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42042HIGHPDF-XChange Editor App Object Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-39775MEDIUMNet Manager has an out-of-bounds read permission bypass vulnerabilityEPSS 0.4%CVE-2023-42057HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42064HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-28832HIGHAdobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-43916HIGHpam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walkerEPSS 0.4%CVE-2026-20346HIGHClamAV PDF File Format Processing Memory Corruption VulnerabilityEPSS 0.4%CVE-2026-24818MEDIUMA heap-based buffer over-read that might affect a system that compiles untrusted Lua code in praydog/UEVREPSS 0.4%CVE-2026-65918HIGHPyTorch torchvision GIF Decoder Out-of-bounds Heap ReadEPSS 0.4%CVE-2026-55777MEDIUMGoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoSEPSS 0.4%