Fallos del tipo CWE-125
5126 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-3622HIGHDenial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841NEPSS 0.7%CVE-2024-25201HIGHEspruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c.EPSS 0.7%CVE-2022-40663HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. UEPSS 0.7%CVE-2024-40780MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.EPSS 0.7%CVE-2024-21639MEDIUMOOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemoryEPSS 0.7%CVE-2025-21341MEDIUMWindows Digital Media Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-65364HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TaEPSS 0.7%CVE-2025-20152HIGHISE restartEPSS 0.7%CVE-2022-47881MEDIUMFoxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.EPSS 0.7%CVE-2024-39882HIGHOut-of-bounds Read in Delta Electronics CNCSoft-G2EPSS 0.7%CVE-2020-26269—Heap out of bounds read in filesystem glob matching in TensorFlowEPSS 0.7%CVE-2025-12183HIGHorg.lz4:lz4-java - Out-of-Bounds Memory AccessEPSS 0.7%CVE-2024-6102HIGHOut of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruptioEPSS 0.7%CVE-2026-66033HIGHlibssh2 Integer Underflow DoS via AES-GCM Cipher NegotiationEPSS 0.7%CVE-2024-54506CRITICALAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be ablEPSS 0.7%CVE-2022-32841MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS MonterEPSS 0.7%CVE-2025-48822HIGHWindows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-38117HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-26217MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2024-47250MEDIUMApache NimBLE: Lack of input validation in HCI advertising report could lead to potential out-of-bound accessEPSS 0.7%