Fallos del tipo CWE-125
6000 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2021-26623HIGHBandisoft ARK Library Out-of-bound VulnerabilityEPSS 1.1%CVE-2025-49657HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2022-32745—A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually EPSS 1.1%CVE-2026-83521MEDIUMWindows IKE Extension Information Disclosure VulnerabilityEPSS 1.1%CVE-2026-85808HIGHWindows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityEPSS 1.1%CVE-2026-96861HIGHNetwork Device Enrollment Service (NDES) Denial of Service VulnerabilityEPSS 1.1%CVE-2026-96866HIGHNetwork Device Enrollment Service (NDES) Denial of Service VulnerabilityEPSS 1.1%CVE-2020-5134—A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulEPSS 1.1%CVE-2018-11727MEDIUMThe libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an EPSS 1.1%CVE-2018-11728MEDIUMThe libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attaEPSS 1.1%CVE-2024-44246MEDIUMThe issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iEPSS 1.1%CVE-2026-25646HIGHLIBPNG has a heap buffer overflow in png_set_quantizeEPSS 1.1%CVE-2021-29463LOWOut-of-bounds read in Exiv2::WebPImage::doWriteMetadataEPSS 1.1%CVE-2026-70281HIGHMicrosoft Office Outlook Information Disclosure VulnerabilityEPSS 1.1%CVE-2025-43445MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOSEPSS 1.1%CVE-2021-0261HIGHJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requestsEPSS 1.1%CVE-2026-103569HIGHWindows IKE Extension Information Disclosure VulnerabilityEPSS 1.1%CVE-2023-21699MEDIUMWindows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityEPSS 1.1%CVE-2023-39179HIGHKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityEPSS 1.1%CVE-2022-26770HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS MoEPSS 1.1%