Fallos del tipo CWE-125
5126 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-24213HIGHNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successfuEPSS 0.7%CVE-2022-39061MEDIUMChangingTec MegaServiSignAdapter - Out-of-bounds ReadEPSS 0.7%CVE-2020-28394—A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected appliEPSS 0.7%CVE-2020-27008—A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected appliEPSS 0.7%CVE-2024-23086CRITICALApfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this iEPSS 0.7%CVE-2026-7482HIGHOllama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackersEPSS 0.7%CVE-2026-28231MEDIUMpillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds ReadEPSS 0.7%CVE-2026-42216HIGHOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionEPSS 0.7%CVE-2023-3040LOWOut of Bounds Access Leading to Undefined BehaviorEPSS 0.7%CVE-2024-45829MEDIUMSharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulEPSS 0.7%CVE-2026-67636CRITICALMicrosoft SQL Server Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-54341HIGHDragonfly: RESTORE operations may crash the serverEPSS 0.7%CVE-2026-20479HIGHIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has conEPSS 0.7%CVE-2024-20658HIGHMicrosoft Virtual Hard Disk Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-15714MEDIUMLibsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary stringEPSS 0.7%CVE-2025-27788HIGHRuby JSON Parser has Out-of-bounds ReadEPSS 0.7%CVE-2023-2838MEDIUMOut-of-bounds Read in gpac/gpacEPSS 0.7%CVE-2024-21430MEDIUMWindows USB Attached SCSI (UAS) Protocol Remote Code Execution VulnerabilityEPSS 0.7%CVE-2022-44648MEDIUMAn Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive infEPSS 0.7%CVE-2022-44647MEDIUMAn Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive infEPSS 0.7%