Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-77895HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-69342HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-68887HIGHWindows Message Queuing Queue Manager Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77893HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77501HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2026-77502HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.2%CVE-2024-47775MEDIUMGHSL-2024-261: GStreamer has an OOB-read in parse_ds64EPSS 1.2%CVE-2024-47777MEDIUMGHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunkEPSS 1.2%CVE-2021-40766LOWAdobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.2%CVE-2024-47597MEDIUMGHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samplesEPSS 1.2%CVE-2024-47776MEDIUMGHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunkEPSS 1.2%CVE-2021-22753—A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or EPSS 1.2%CVE-2024-38184HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2021-40769LOWAdobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.2%CVE-2017-9283—An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for furEPSS 1.2%CVE-2022-0525HIGHOut-of-bounds Read in mruby/mrubyEPSS 1.2%CVE-2024-26003HIGHPHOENIX CONTACT: DoS of the control agent in CHARX SeriesEPSS 1.2%CVE-2023-24977HIGHApache InLong: Jdbc Connection causes arbitrary file reading in InLongEPSS 1.2%CVE-2021-3881HIGHOut-of-bounds Read in bfabiszewski/libmobiEPSS 1.2%CVE-2022-20498MEDIUMIn fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inEPSS 1.2%