Fallos del tipo CWE-125
5159 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-48111MEDIUMGHSL-2026-121 7-Zip UEFI DEPEX OOB ReadEPSS 0.3%CVE-2026-48103MEDIUMGHSL-2026-119 7-Zip WIM SecurityId OOB readEPSS 0.3%CVE-2024-20766MEDIUMAdobe Indesign 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure VulnerabiityEPSS 0.3%CVE-2023-44325MEDIUMZDI-CAN-21666: Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-23935MEDIUMUse-after-free read in script item/preprocessing HttpRequest bodyEPSS 0.3%CVE-2022-46457MEDIUMNASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.EPSS 0.3%CVE-2024-40779MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.EPSS 0.3%CVE-2025-49175MEDIUMXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsEPSS 0.3%CVE-2025-69806HIGHp2r3 bareiron commit: 8e4d4020d contains an Out-of-bounds Read, which allows unauthenticated remote attackers to get relative information leEPSS 0.3%CVE-2024-40806MEDIUMAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and EPSS 0.3%CVE-2025-24228HIGHA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS VEPSS 0.3%CVE-2023-4042MEDIUMGhostscript: incomplete fix for cve-2020-16305EPSS 0.3%CVE-2025-11714HIGHMemory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144EPSS 0.3%CVE-2023-22347HIGHOut-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verifieEPSS 0.3%CVE-2023-22349HIGHOut-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verifieEPSS 0.3%CVE-2024-49549MEDIUMInDesign Desktop | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2024-49548MEDIUMInDesign Desktop | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2024-49541MEDIUMIllustrator | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2023-22346HIGHOut-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verifieEPSS 0.3%CVE-2024-49546MEDIUMInDesign Desktop | Out-of-bounds Read (CWE-125)EPSS 0.3%