Fallos del tipo CWE-125
6001 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-96246HIGHNetwork Policy Server (NPS) Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-85334HIGHWindows Message Queuing Queue Manager Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-96245HIGHWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.0%CVE-2023-52169HIGHThe NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the iEPSS 1.0%CVE-2023-39197MEDIUMKernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()EPSS 1.0%CVE-2022-23493CRITICALOut of Bound Read in xrdpEPSS 1.0%CVE-2026-69715CRITICALWindows Direct Show Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-69493CRITICALWindows Event Logging Service Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-45229MEDIUMOut-of-Bounds Read in EDK II Network PackageEPSS 1.0%CVE-2026-97779MEDIUMMicrosoft Office Excel Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-97760MEDIUMMicrosoft Office Excel Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-70206MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 1.0%CVE-2024-37407CRITICALLibarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slEPSS 1.0%CVE-2023-28445CRITICALDeno improperly handles resizable ArrayBufferEPSS 1.0%CVE-2021-32975—Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-EPSS 1.0%CVE-2021-27412—Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitEPSS 1.0%CVE-2025-24162MEDIUMThis issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3EPSS 1.0%CVE-2025-24265CRITICALAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS VenEPSS 1.0%CVE-2024-49103MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.0%CVE-2024-49098MEDIUMWindows Wireless Wide Area Network Service (WwanSvc) Information Disclosure VulnerabilityEPSS 1.0%