Fallos del tipo CWE-125
5126 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2025-52871LOWLicense CenterEPSS 0.6%CVE-2025-30376HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-43773CRITICALAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TEPSS 0.6%CVE-2026-21900HIGHCryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok PatternEPSS 0.6%CVE-2024-30347LOWFoxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-26675HIGHWindows Subsystem for Linux Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2022-1738HIGHFuji Electric D300win Out-of-bounds ReadEPSS 0.6%CVE-2025-33062MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-9249HIGHFoxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-47993MEDIUMA Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.EPSS 0.6%CVE-2025-33055MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2022-40647HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2024-30401HIGHJunos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftmanEPSS 0.6%CVE-2022-40640HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-0284—A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggereEPSS 0.6%CVE-2025-60726HIGHMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-3406MEDIUMNothings stb Header Array stbhw_build_tileset_from_image out-of-boundsEPSS 0.6%CVE-2026-10672HIGHUnterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)EPSS 0.6%CVE-2025-54902HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-54898HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%