Fallos del tipo CWE-125
5136 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2024-3855MEDIUMIn certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 12EPSS 0.4%CVE-2022-41661HIGHA vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), TeamceEPSS 0.4%CVE-2023-39192MEDIUMKernel: netfilter: xtables out-of-bounds read in u32_match_it()EPSS 0.4%CVE-2023-47068HIGHZDI-CAN-21702: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-47069HIGHZDI-CAN-21703: Adobe After Effects M4A File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-47067HIGHZDI-CAN-21706: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-51562LOWFoxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-51555LOWFoxit PDF Reader Doc Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-40550MEDIUMShim: out-of-bound read in verify_buffer_sbat()EPSS 0.4%CVE-2023-51558LOWFoxit PDF Reader AcroForm Doc Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-40551MEDIUMShim: out of bounds read when parsing mz binariesEPSS 0.4%CVE-2023-38217MEDIUMZDI-CAN-21403: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-27346LOWKofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2018-9430CRITICALIn prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code exeEPSS 0.4%CVE-2026-64833HIGHFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.cEPSS 0.4%CVE-2024-7511LOWTrimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-21536MEDIUMEvent Tracing for Windows Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-42755MEDIUMKernel: rsvp: out-of-bounds read in rsvp_classify()EPSS 0.4%CVE-2024-36999HIGHMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based productsEPSS 0.4%CVE-2026-24481HIGHImageMagick has Possible Heap Information Disclosure in PSD ZIP DecompressionEPSS 0.4%