Fallos del tipo CWE-125
5182 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2023-20969MEDIUMIn multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2024-20085MEDIUMIn power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System EPSS 0.1%CVE-2024-27220HIGHIn lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation oEPSS 0.1%CVE-2024-21950LOWAn out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of establEPSS 0.1%CVE-2023-21032MEDIUMIn _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to locaEPSS 0.1%CVE-2023-20973MEDIUMIn btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lEPSS 0.1%CVE-2026-24921MEDIUMAddress read vulnerability in the HDC module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentiaEPSS 0.1%CVE-2023-20977MEDIUMIn btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This coEPSS 0.1%CVE-2023-20974MEDIUMIn btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. ThEPSS 0.1%CVE-2023-21208—In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to locaEPSS 0.1%CVE-2025-48596HIGHIn appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of prEPSS 0.1%CVE-2023-21048MEDIUMIn handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discloEPSS 0.1%CVE-2023-20674MEDIUMIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2023-20665MEDIUMIn ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System exEPSS 0.1%CVE-2022-47334MEDIUMIn phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with EPSS 0.1%CVE-2023-21013MEDIUMIn forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infoEPSS 0.1%CVE-2023-20730MEDIUMIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2023-20675MEDIUMIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2023-21014MEDIUMIn multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2022-48236MEDIUMIn MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SystemEPSS 0.1%