Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2022-31001HIGHOut-of-bounds Read in Sofia-SIPEPSS 2.2%CVE-2024-43562HIGHWindows Network Address Translation (NAT) Denial of Service VulnerabilityEPSS 2.2%CVE-2024-43565HIGHWindows Network Address Translation (NAT) Denial of Service VulnerabilityEPSS 2.2%CVE-2022-23193MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 2.2%CVE-2025-9232MEDIUMOut-of-bounds read in HTTP client no_proxy handlingEPSS 2.2%CVE-2010-4577HIGHThe CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS befoEPSS 2.2%CVE-2021-3998HIGHA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage andEPSS 2.2%CVE-2021-45052LOWAdobe Bridge TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 2.2%CVE-2024-37966HIGHMicrosoft SQL Server Native Scoring Information Disclosure VulnerabilityEPSS 2.2%CVE-2021-27264LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. UseEPSS 2.2%CVE-2021-27266LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. UseEPSS 2.2%CVE-2020-11099LOWOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPEPSS 2.2%CVE-2021-43302—Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds reEPSS 2.2%CVE-2021-39865LOWAdobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 2.2%CVE-2022-38449MEDIUMAdobe Acrobat Reader DC JP2 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 2.2%CVE-2021-42719HIGHAdobe Bridge Out-of-bounds read could lead to Arbitrary Code ExecutionEPSS 2.2%CVE-2026-48103MEDIUMGHSL-2026-119 7-Zip WIM SecurityId OOB readEPSS 2.2%CVE-2026-48111MEDIUMGHSL-2026-121 7-Zip UEFI DEPEX OOB ReadEPSS 2.2%CVE-2017-9117MEDIUMIn LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-infEPSS 2.2%CVE-2022-28249MEDIUMAdobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 2.2%