Fallos del tipo CWE-125

5179 resultados

Leitura fora dos limites do buffer

Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.

Ejemplo

Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.

Cómo mitigar

Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).

CVE-2024-50158HIGHRDMA/bnxt_re: Fix out of bound checkEPSS 0.2%CVE-2023-32289HIGH The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead tEPSS 0.2%CVE-2023-31278HIGHHorner Automation Cscape Out-of-bounds ReadEPSS 0.2%CVE-2024-0076LOW NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a EPSS 0.2%CVE-2023-0187MEDIUMNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lEPSS 0.2%CVE-2024-26970MEDIUMclk: qcom: gcc-ipq6018: fix terminating of frequency table arraysEPSS 0.2%CVE-2024-22251MEDIUMOut-of-bounds read vulnerability EPSS 0.2%CVE-2025-43326MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS TahoeEPSS 0.2%CVE-2025-43239HIGHAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, mEPSS 0.2%CVE-2026-28418MEDIUMVim has Heap-based Buffer Overflow in Emacs tags parsingEPSS 0.2%CVE-2024-26896—wifi: wfx: fix memory leak when starting APEPSS 0.2%CVE-2025-7291HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-1940MEDIUMGstreamer: incomplete fix of cve-2026-1940EPSS 0.2%CVE-2025-7298HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7312HIGHIrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2021-25454LOWOOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac EPSS 0.2%CVE-2026-21324HIGHAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2026-23951MEDIUMSumatraPDF's Integer Underflow in PalmDbReader Leads to CrashEPSS 0.2%CVE-2026-21322HIGHAfter Effects | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2026-61908LOWAn issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated userEPSS 0.2%