Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2024-37342HIGHMicrosoft SQL Server Native Scoring Information Disclosure VulnerabilityEPSS 1.7%CVE-2021-34296—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll libEPSS 1.7%CVE-2021-40812MEDIUMThe GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return valuEPSS 1.7%CVE-2020-11098LOWOut-of-bound read in glyph_cache_put in FreeRDPEPSS 1.7%CVE-2021-34887LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User inteEPSS 1.7%CVE-2023-21702HIGHWindows iSCSI Service Denial of Service VulnerabilityEPSS 1.7%CVE-2021-46610LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.7%CVE-2017-2579LOWAn out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value checEPSS 1.6%CVE-2020-11047MEDIUMOut-of-bounds Read in FreeRDPEPSS 1.6%CVE-2021-46600LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16EPSS 1.6%CVE-2023-6121MEDIUMKernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_getEPSS 1.6%CVE-2022-1069HIGHSofting Secure Integration Server Out-of-bounds ReadEPSS 1.6%CVE-2023-24924HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.6%CVE-2025-9230CRITICALOut-of-bounds read & write in RFC 3211 KEK UnwrapEPSS 1.6%CVE-2022-0623MEDIUMOut-of-bounds Read in mruby/mrubyEPSS 1.6%CVE-2019-10129MEDIUMA vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can EPSS 1.6%CVE-2025-22226HIGHVMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actorEPSS 1.6%KEVCVE-2023-32035MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-32034MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33164MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%