Fallos del tipo CWE-125
5076 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2023-6377HIGHXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsEPSS 1.6%CVE-2025-21178HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.6%CVE-2021-4166HIGHOut-of-bounds Read in vim/vimEPSS 1.6%CVE-2023-39354MEDIUMFreeRDP Out-Of-Bounds Read in nsc_rle_decompress_dataEPSS 1.6%CVE-2022-1276HIGHOut-of-bounds Read in mrb_get_args in mruby/mrubyEPSS 1.6%CVE-2021-42388—Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 1EPSS 1.6%CVE-2021-42387—Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 1EPSS 1.6%CVE-2021-3643—A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker toEPSS 1.6%CVE-2021-29470MEDIUMOut-of-bounds read in Exiv2::Jp2Image::encodeJp2HeaderEPSS 1.6%CVE-2024-38214MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.6%CVE-2021-29458—Out-of-bounds read in Exiv2::Internal::CrwMap::encodeEPSS 1.6%CVE-2022-2126HIGHOut-of-bounds Read in vim/vimEPSS 1.6%CVE-2019-1853MEDIUMCisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read VulnerabilityEPSS 1.6%CVE-2024-48208HIGHpure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.EPSS 1.6%CVE-2025-49796CRITICALLibxml: type confusion leads to denial of service (dos)EPSS 1.6%CVE-2025-9230HIGHOut-of-bounds read & write in RFC 3211 KEK UnwrapEPSS 1.6%CVE-2020-12403—A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could causeEPSS 1.5%CVE-2022-24055LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. UEPSS 1.5%CVE-2022-24060LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. UEPSS 1.5%CVE-2024-37401HIGHAn out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial oEPSS 1.5%