Fallos del tipo CWE-125

5135 resultados

Leitura fora dos limites do buffer

Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.

Ejemplo

Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.

Cómo mitigar

Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).

CVE-2026-69527MEDIUMWindows USB Mass Storage Class Driver Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-62743MEDIUMWin32k Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-69457MEDIUMWindows USB Driver Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-69504MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-69808MEDIUMWin32k Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-71341MEDIUMWindows Partition Management Driver Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-69568MEDIUMStorage Spaces Controller Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-62738MEDIUMWindows Management Instrumentation Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-83501MEDIUMWindows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-65784MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-69286MEDIUMWindows USB Audio Class Driver Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-76870HIGHNetcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload ValidationEPSS 0.4%CVE-2026-50300MEDIUMWindows DWM Core Library Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-40686LOWIn Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malfoEPSS 0.4%CVE-2026-44814MEDIUMWindows DWM Core Library Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-45634MEDIUMWindows DHCP Client Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-61933MEDIUMWindows DWM Core Library Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-62796MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-58614MEDIUMWindows Kernel Security Feature Bypass VulnerabilityEPSS 0.4%CVE-2026-35419MEDIUMWindows DWM Core Library Information Disclosure VulnerabilityEPSS 0.4%