Fallos del tipo CWE-125
5159 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-17701CRITICALInsufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromEPSS 0.3%CVE-2025-27184MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2023-2860MEDIUMOut-of-bounds read when setting hmac dataEPSS 0.3%CVE-2024-11581HIGHLuxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-27204MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2025-27201MEDIUMAnimate | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2025-27187MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2025-27202MEDIUMAnimate | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2020-27788—An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker witEPSS 0.3%CVE-2025-27186MEDIUMAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.3%CVE-2023-44335MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability I.EPSS 0.3%CVE-2023-32360—An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, maEPSS 0.3%CVE-2023-44331MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability IV.EPSS 0.3%CVE-2023-44332MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability II.EPSS 0.3%CVE-2023-47077MEDIUMAdobe InDesign CC 2023 Memory Corruption Vulnerability VI.EPSS 0.3%CVE-2023-44333MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability V.EPSS 0.3%CVE-2023-44334MEDIUMAdobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability VI.EPSS 0.3%CVE-2024-31198MEDIUMOut-of-bounds Read in libfluid_msg libraryEPSS 0.3%CVE-2026-5913HIGHOut of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a EPSS 0.3%CVE-2026-17995HIGHOut of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a cEPSS 0.3%