Fallos del tipo CWE-125
5177 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2023-32357—An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOEPSS 0.2%CVE-2023-32389—This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvEPSS 0.2%CVE-2025-68382MEDIUMPacketbeat Out-of-bounds ReadEPSS 0.2%CVE-2023-0180HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or informatEPSS 0.2%CVE-2024-40816MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS VEPSS 0.2%CVE-2022-3170—An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did notEPSS 0.2%CVE-2025-30306MEDIUMXMPWorker | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2023-34256MEDIUMAn issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/suEPSS 0.2%CVE-2026-71402MEDIUMwicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total lengthEPSS 0.2%CVE-2025-30309MEDIUMXMPWorker | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2023-27929MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOEPSS 0.2%CVE-2025-61839HIGHFormat Plugins | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2023-32372MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5,EPSS 0.2%CVE-2021-47126HIGHipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptionsEPSS 0.2%CVE-2026-11091HIGHInappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds EPSS 0.2%CVE-2024-2884MEDIUMOut of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory acceEPSS 0.2%CVE-2025-53055MEDIUMVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions thEPSS 0.2%CVE-2025-53065MEDIUMVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions thEPSS 0.2%CVE-2023-32363—A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An apEPSS 0.2%CVE-2026-48104MEDIUMGHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap readEPSS 0.2%