Fallos del tipo CWE-125
5136 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2025-62493MEDIUMHeap out-of-bounds read in js_bigint_to_string1 in QuickJSEPSS 0.4%CVE-2026-43712MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.EPSS 0.4%CVE-2026-43676MEDIUMAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7EPSS 0.4%CVE-2024-0071HIGHCVEEPSS 0.4%CVE-2025-55099LOWPotential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()EPSS 0.4%CVE-2022-42768MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.4%CVE-2023-37359LOWKofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-40470LOWPDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-38085LOWKofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-38077LOWKofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-37352LOWKofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-91956HIGHFreeRDP before 3.31.0 Out-of-Bounds Read via URBDRCEPSS 0.4%CVE-2026-91959HIGHFreeRDP before 3.31.0 Buffer Over-read via RTS GatewayEPSS 0.4%CVE-2023-37357LOWKofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-32984MEDIUMHeap buffer overflow in wazuh-authdEPSS 0.4%CVE-2023-37358LOWKofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-34960HIGHbarebox Out-of-Bounds Read in DHCP Option ParsingEPSS 0.4%CVE-2023-38086LOWKofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2022-32942HIGHThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.EPSS 0.4%CVE-2023-25584MEDIUMOut of bounds read in parse_module function in bfd/vms-alpha.cEPSS 0.4%