Fallos del tipo CWE-125
5119 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2025-49681MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.0%CVE-2023-52169HIGHThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the iEPSS 1.0%CVE-2024-32622CRITICALHDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.cEPSS 1.0%CVE-2021-37619MEDIUMOut-of-bounds read in Exiv2::Jp2Image::encodeJp2HeaderEPSS 1.0%CVE-2021-37618MEDIUMOut-of-bounds read in Exiv2::Jp2Image::printStructureEPSS 1.0%CVE-2026-5342MEDIUMLibRaw TIFF/NEF decoders_libraw.cpp nikon_load_padded_packed_raw out-of-boundsEPSS 1.0%CVE-2025-24162MEDIUMThis issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3EPSS 1.0%CVE-2023-39197MEDIUMKernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()EPSS 1.0%CVE-2024-54508MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS SeEPSS 1.0%CVE-2025-55700MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.0%CVE-2025-58717MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-69715CRITICALWindows Direct Show Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-9076HIGHOut-of-Bounds Read in CMS Password-Based DecryptionEPSS 1.0%CVE-2022-34465—A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.250), Parasolid V34EPSS 1.0%CVE-2023-28445CRITICALDeno improperly handles resizable ArrayBufferEPSS 1.0%CVE-2024-37407CRITICALLibarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slEPSS 1.0%CVE-2021-27412—Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitEPSS 1.0%CVE-2021-32975—Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-EPSS 1.0%CVE-2024-49103MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.0%CVE-2024-49099MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.0%