Fallos del tipo CWE-125
5104 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2024-32041CRITICALFreeRDP OutOfBound Read in zgfx_decompress_segmentEPSS 1.9%CVE-2021-3504—A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. EPSS 1.9%CVE-2016-9583MEDIUMAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.EPSS 1.9%CVE-2021-46595LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.9%CVE-2020-11043LOWOut-of-bounds Read in FreeRDPEPSS 1.9%CVE-2024-32460HIGHFreeRDP Out-Of-Bounds Read in interleaved_decompressEPSS 1.9%CVE-2022-23191MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23196MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23195MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23197MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23190MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23194MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2020-27291—Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may alloEPSS 1.9%CVE-2020-11018MEDIUMOut of bound read in cliprdr_server_receive_capabilities in FreeRDPEPSS 1.9%CVE-2022-31002HIGHOut-of-bounds Read in Sofia-SIPEPSS 1.9%CVE-2022-24370LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0EPSS 1.9%CVE-2022-28850MEDIUMAdobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.9%CVE-2024-23529MEDIUMAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unaEPSS 1.9%CVE-2024-23528MEDIUMAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unaEPSS 1.9%CVE-2024-23530MEDIUMAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unaEPSS 1.9%