Fallos del tipo CWE-125
5094 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2023-42114LOWExim NTLM Challenge Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 28.1%CVE-2018-17686—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User inEPSS 24.4%CVE-2011-3406HIGHBuffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) iEPSS 23.1%CVE-2021-22918—Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. EPSS 23.1%CVE-2022-43650LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0. User interEPSS 23.0%CVE-2024-29943CRITICALAn attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This EPSS 22.9%CVE-2021-21056HIGHAdobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code ExecutionEPSS 21.2%CVE-2022-24315—A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted EPSS 19.3%CVE-2022-38393HIGHA denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 routEPSS 18.8%CVE-2020-11899MEDIUMThe Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.EPSS 18.6%KEVCVE-2023-27857HIGHRockwell Automation ThinManager ThinServer Heap-Based Buffer OverflowEPSS 18.3%CVE-2022-24314—A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attackerEPSS 18.2%CVE-2023-42916MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2EPSS 17.8%KEVCVE-2024-48456HIGHAn issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0EPSS 17.3%CVE-2024-54502MEDIUMThe issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.EPSS 17.1%CVE-2017-14461MEDIUMA specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensiEPSS 16.7%CVE-2023-1380HIGHA slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the LinuEPSS 16.5%CVE-2026-8451HIGHInsufficient input validation leading to memory overreadEPSS 15.7%CVE-2018-5380MEDIUMThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer vaEPSS 14.8%CVE-2021-21042MEDIUMAcrobat Reader DC Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 14.7%