Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2023-21691HIGHMicrosoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure VulnerabilityEPSS 1.4%CVE-2020-16201—Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited bEPSS 1.4%CVE-2022-0319MEDIUMOut-of-bounds Read in vim/vimEPSS 1.4%CVE-2018-6340HIGHThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached EPSS 1.4%CVE-2020-11088LOWOut-of-bound read in FreeRDPEPSS 1.4%CVE-2022-34278—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.4%CVE-2022-34272—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.4%CVE-2022-34280—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.4%CVE-2022-34281—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.4%CVE-2022-34277—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.4%CVE-2022-34279—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.4%CVE-2021-31506LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6EPSS 1.4%CVE-2018-20618HIGHok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.EPSS 1.4%CVE-2026-88159HIGHWindows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityEPSS 1.4%CVE-2022-2257HIGHOut-of-bounds Read in vim/vimEPSS 1.4%CVE-2023-21682MEDIUMWindows Point-to-Point Protocol (PPP) Information Disclosure VulnerabilityEPSS 1.4%CVE-2022-2881MEDIUMBuffer overread in statistics channel codeEPSS 1.4%CVE-2025-29836MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2023-35316MEDIUMRemote Procedure Call Runtime Information Disclosure VulnerabilityEPSS 1.4%CVE-2021-22663—Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an ouEPSS 1.4%