Fallos del tipo CWE-125
5077 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2022-32912HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. ProceEPSS 1.5%CVE-2020-11095LOWGlobal OOB read in update_recv_primary_order in FreeRDPEPSS 1.5%CVE-2021-32938—Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of pEPSS 1.4%CVE-2021-44700LOWAdobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-53805HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.4%CVE-2025-32715MEDIUMRemote Desktop Protocol Client Information Disclosure VulnerabilityEPSS 1.4%CVE-2023-39180MEDIUMKernel: ksmbd: read request memory leak denial-of-service vulnerabilityEPSS 1.4%CVE-2020-16201—Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited bEPSS 1.4%CVE-2022-0319MEDIUMOut-of-bounds Read in vim/vimEPSS 1.4%CVE-2018-6340HIGHThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached EPSS 1.4%CVE-2023-21691HIGHMicrosoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure VulnerabilityEPSS 1.4%CVE-2020-11086LOWOut-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`EPSS 1.4%CVE-2020-11087LOWOut-of-bounds Read in FreeRDPEPSS 1.4%CVE-2021-31506LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6EPSS 1.4%CVE-2018-20618HIGHok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.EPSS 1.4%CVE-2020-11097LOWOOB read in ntlm_av_pair_get in FreeRDPEPSS 1.4%CVE-2025-29960MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2022-2881MEDIUMBuffer overread in statistics channel codeEPSS 1.4%CVE-2021-43752LOWAdobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.4%CVE-2022-2257HIGHOut-of-bounds Read in vim/vimEPSS 1.4%