Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2021-39862LOWAdobe FrameMaker PostScript File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.5%CVE-2022-48303MEDIUMGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to cEPSS 1.5%CVE-2021-44700LOWAdobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.5%CVE-2024-38240HIGHWindows Remote Access Connection Manager Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2021-38561HIGHgolang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index EPSS 1.5%CVE-2022-1899HIGHOut-of-bounds Read in radareorg/radare2EPSS 1.5%CVE-2023-39353MEDIUMMissing offset validation leading to Out Of Bound Read in FreeRDPEPSS 1.5%CVE-2023-40188MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.5%CVE-2019-11935—Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versEPSS 1.5%CVE-2022-32912HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. ProceEPSS 1.5%CVE-2021-3643—A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker toEPSS 1.5%CVE-2018-14814—WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied datEPSS 1.5%CVE-2022-1304HIGHAn out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary codEPSS 1.5%CVE-2025-9086HIGHOut of bounds read for cookie pathEPSS 1.5%CVE-2020-27842—There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openEPSS 1.5%CVE-2020-27845—There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpegEPSS 1.5%CVE-2021-43752LOWAdobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.5%CVE-2025-29961MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2021-32938—Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of pEPSS 1.4%CVE-2023-39180MEDIUMKernel: ksmbd: read request memory leak denial-of-service vulnerabilityEPSS 1.4%