Fallos del tipo CWE-125
5159 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2023-44344MEDIUMAdobe InDesign CC 2023 Memory Corruption Vulnerability V.EPSS 0.3%CVE-2024-20750HIGHAdobe Substance 3D Designer PICT Parsing Out-Of-Bounds Read VulnerabilityEPSS 0.3%CVE-2025-54164MEDIUMQTS, QuTS heroEPSS 0.3%CVE-2023-44343MEDIUMAdobe InDesign CC 2023 Memory Corruption Vulnerability III.EPSS 0.3%CVE-2024-20791HIGHIllustrator 2024 BMP File Parsing Memory CorruptionEPSS 0.3%CVE-2023-44342MEDIUMAdobe InDesign CC 2023 Memory Corruption Vulnerability II.EPSS 0.3%CVE-2025-54166MEDIUMQTS, QuTS heroEPSS 0.3%CVE-2025-54165MEDIUMQTS, QuTS heroEPSS 0.3%CVE-2025-47816LOWlibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related tEPSS 0.3%CVE-2024-1847HIGHMultiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024EPSS 0.3%CVE-2026-25175HIGHWindows NTFS Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2020-12911—A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.2EPSS 0.3%CVE-2026-33985MEDIUMFreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB ReadEPSS 0.3%CVE-2025-53470LOWApache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driverEPSS 0.3%CVE-2022-34238MEDIUMAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.3%CVE-2023-44325MEDIUMZDI-CAN-21666: Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-77503HIGHWindows NTFS Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2022-46457MEDIUMNASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.EPSS 0.3%CVE-2026-26109HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-20770MEDIUMAdobe Photoshop 2024 TIF File parsing Out-Of-Bound ReadEPSS 0.3%