Fallos del tipo CWE-125
5183 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2024-27234MEDIUMIn fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclEPSS 0.1%CVE-2024-29750MEDIUMIn km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disEPSS 0.1%CVE-2023-40112MEDIUMIn ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclEPSS 0.1%CVE-2024-29742MEDIUMIn apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informEPSS 0.1%CVE-2018-9435MEDIUMIn gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2025-20662MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2025-20661MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2025-20660MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2018-9408MEDIUMIn m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of
Bounds Read due to a missing bounds check. This could lead toEPSS 0.1%CVE-2024-27235MEDIUMIn plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information discloEPSS 0.1%CVE-2022-47323MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2024-20091MEDIUMIn vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2024-29783MEDIUMIn tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosEPSS 0.1%CVE-2024-40656MEDIUMIn handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused EPSS 0.1%CVE-2024-20116MEDIUMIn cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2025-20776MEDIUMIn display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliEPSS 0.1%CVE-2024-56184MEDIUMIn static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inEPSS 0.1%CVE-2023-48341MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%CVE-2023-52536MEDIUMIn faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SysEPSS 0.1%CVE-2023-48344MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%