Fallos del tipo CWE-125
6001 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-32647HIGHNGINX ngx_http_mp4_module vulnerabilityEPSS 0.9%CVE-2025-24196HIGHA type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacEPSS 0.9%CVE-2026-50682HIGHActive Directory Denial of Service VulnerabilityEPSS 0.9%CVE-2020-13601CRITICALPossible read out of bounds in dns readEPSS 0.9%CVE-2026-70210HIGHWindows OLE DB Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-1207MEDIUMOut-of-bounds read in radareorg/radare2EPSS 0.9%CVE-2026-97841MEDIUMRole: DNS Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-97836MEDIUMRole: DNS Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-97839MEDIUMRole: DNS Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-97840MEDIUMRole: DNS Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-97835MEDIUMRole: DNS Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-97838MEDIUMRole: DNS Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-97837MEDIUMRole: DNS Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2024-47543MEDIUMGHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_containerEPSS 0.9%CVE-2024-47602MEDIUMGHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxerEPSS 0.9%CVE-2026-80084MEDIUMMicrosoft Office Outlook Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-70327MEDIUMMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-61924MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78502MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-78522MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%