Fallos del tipo CWE-125
5119 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2020-5254LOWNetHack hilite_status parsing privilege escalationEPSS 1.1%CVE-2022-43596MEDIUMAn information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4EPSS 1.1%CVE-2022-35261MEDIUMA denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted nEPSS 1.1%CVE-2026-69428HIGHWindows LDAP - Lightweight Directory Access Protocol Denial of Service VulnerabilityEPSS 1.1%CVE-2026-77895HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.1%CVE-2026-69760HIGHWindows Kerberos Denial of Service VulnerabilityEPSS 1.1%CVE-2026-69342HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.1%CVE-2020-5134—A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulEPSS 1.1%CVE-2022-43592MEDIUMAn information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A speciaEPSS 1.1%CVE-2024-44246MEDIUMThe issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iEPSS 1.1%CVE-2025-5456HIGHA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA GatewaEPSS 1.1%CVE-2021-29463LOWOut-of-bounds read in Exiv2::WebPImage::doWriteMetadataEPSS 1.1%CVE-2022-34282—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34288—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34283—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34285—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-0173CRITICALOut-of-bounds Read in radareorg/radare2EPSS 1.1%CVE-2021-0261HIGHJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requestsEPSS 1.1%CVE-2023-39179HIGHKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityEPSS 1.1%CVE-2025-63657HIGHAn out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a DenialEPSS 1.1%