Fallos del tipo CWE-125

5136 resultados

Leitura fora dos limites do buffer

Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.

Ejemplo

Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.

Cómo mitigar

Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).

CVE-2024-43110HIGHMultiple issues in ctl(4) CAM Target LayerEPSS 0.4%CVE-2022-34242HIGHAdobe Character Animator SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-31178MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31181MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31189MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31179MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2023-25659HIGHTensorFlow vulnerable to Out-of-Bounds Read in DynamicStitchEPSS 0.4%CVE-2024-31188MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2025-11679MEDIUMOut-of-bounds Read in libwebsockets PNG parsingEPSS 0.4%CVE-2024-31177MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31183MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31186MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31176MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31180MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31187MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-31184MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.4%CVE-2024-27326LOWPDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-11529HIGHIrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-56719MEDIUMMikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndXEPSS 0.4%CVE-2024-11526HIGHIrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%