Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2023-40436—The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected sysEPSS 1.3%CVE-2023-1532HIGHOut of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption viEPSS 1.3%CVE-2018-14798—Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The proEPSS 1.3%CVE-2026-70166MEDIUMWindows DNS Denial of Service VulnerabilityEPSS 1.3%CVE-2023-24872HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-70119MEDIUMWindows DNS Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-4424HIGHLibarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingEPSS 1.3%CVE-2025-32906HIGHLibsoup: out of bounds reads in soup_headers_parse_request()EPSS 1.3%CVE-2020-16211—Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially EPSS 1.3%CVE-2020-1671HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.EPSS 1.3%CVE-2022-3599MEDIUMLibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via EPSS 1.3%CVE-2026-83843HIGHWindows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityEPSS 1.3%CVE-2026-83795HIGHWindows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityEPSS 1.3%CVE-2026-83647HIGHWindows Active Directory Domain Services Denial of Service VulnerabilityEPSS 1.3%CVE-2023-40575MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.3%CVE-2021-22756—A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of inEPSS 1.3%CVE-2021-22757—A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of inEPSS 1.3%CVE-2025-55225MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.3%CVE-2022-46393CRITICALAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffeEPSS 1.3%CVE-2023-42821HIGHgithub.com/gomarkdown/markdown Out-of-bounds Read while parsing citationsEPSS 1.3%