Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2022-23196MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23194MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23195MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2022-23191MEDIUMAdobe Illustrator Out-of-bounds Read could lead to Memory leakEPSS 1.9%CVE-2016-9583MEDIUMAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.EPSS 1.9%CVE-2022-24370LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0EPSS 1.9%CVE-2025-5318MEDIUMLibssh: out-of-bounds read in sftp_handle()EPSS 1.9%CVE-2021-4193MEDIUMOut-of-bounds Read in vim/vimEPSS 1.9%CVE-2024-23526MEDIUMAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unaEPSS 1.9%CVE-2024-23529MEDIUMAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unaEPSS 1.9%CVE-2024-23530MEDIUMAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unaEPSS 1.9%CVE-2024-23528MEDIUMAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unaEPSS 1.9%CVE-2020-11096LOWGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPEPSS 1.9%CVE-2022-23204MEDIUMAdobe Premiere Rush JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.9%CVE-2020-11043LOWOut-of-bounds Read in FreeRDPEPSS 1.9%CVE-2021-33643MEDIUMAn attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable EPSS 1.9%CVE-2019-5065MEDIUMAn exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted EPSS 1.9%CVE-2022-0400—An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.EPSS 1.9%CVE-2021-34901LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User inteEPSS 1.9%CVE-2021-21089LOWAdobe Acrobat Reader DC URI Parsing Out-Of-Bounds ReadEPSS 1.9%