Fallos del tipo CWE-125
5119 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2021-44008—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_LoadeEPSS 0.9%CVE-2024-26174MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-44009—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_LoadeEPSS 0.9%CVE-2020-15211MEDIUMOut of bounds access in tensorflow-liteEPSS 0.9%CVE-2021-33649—When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the siEPSS 0.9%CVE-2021-33648—When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shapEPSS 0.9%CVE-2021-33650—When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access dataEPSS 0.9%CVE-2023-46569CRITICALAn out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.EPSS 0.9%CVE-2023-26253HIGHIn Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.EPSS 0.9%CVE-2026-80096HIGHWindows Remote Desktop Services Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-35263MEDIUMA denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted nEPSS 0.9%CVE-2022-24383HIGHICSA-22-090-03 Fuji Electric Alpha5EPSS 0.9%CVE-2022-35262MEDIUMA denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted nEPSS 0.9%CVE-2024-34200HIGHTOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function.EPSS 0.9%CVE-2021-32614—A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC bytes from it. The EPSS 0.9%CVE-2024-4059MEDIUMOut of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML paEPSS 0.9%CVE-2020-15265MEDIUMSegfault in TensorflowEPSS 0.9%CVE-2021-3548—A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() functioEPSS 0.9%CVE-2026-8186MEDIUMOpen5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-boundsEPSS 0.9%CVE-2020-15208HIGHData corruption in tensorflow-liteEPSS 0.9%