Fallos del tipo CWE-125
5181 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-2243MEDIUMQemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsingEPSS 0.1%CVE-2022-44441MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2026-100505MEDIUMGhidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManagerEPSS 0.1%CVE-2022-44442MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-44440MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42769LOWIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2026-17072LOWGstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containersEPSS 0.1%CVE-2026-18747MEDIUMInteger underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds readEPSS 0.1%CVE-2022-25663MEDIUMPossible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon CompEPSS 0.1%CVE-2022-25676MEDIUMInformation disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer EPSS 0.1%CVE-2025-15614MEDIUMugrep before 7.6.0 Heap Buffer Over-read via .Z decompressionEPSS 0.1%CVE-2025-5941LOWOut-of-Bounds Read Vulnerability in Netskope ClientEPSS 0.1%CVE-2026-96546LOWGimp: gimp: one-byte out-of-bounds heap read in the uncompressed dds loaderEPSS 0.1%CVE-2024-32482LOWTillitis TKey Signer possible RAM disclosure vulnerabilityEPSS 0.1%CVE-2021-0584MEDIUMIn verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local inEPSS 0.1%CVE-2023-21049MEDIUMIn append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to locEPSS 0.1%CVE-2026-20447MEDIUMIn geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege ifEPSS 0.1%CVE-2026-16172MEDIUMNetskope Endpoint DLP Service Out-of-Bounds Read Leading to Process CrashEPSS 0.1%CVE-2022-40519MEDIUMBuffer over-read in CoreEPSS 0.1%CVE-2025-2509HIGHOut-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvEPSS 0.1%