Fallos del tipo CWE-125
5126 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-57228HIGHSuricata smtp/mime: heap out-of-bounds read quoted-printable decoderEPSS 0.6%CVE-2025-33060MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-33065MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-21247HIGHWindows Hyper-V Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-4020CRITICALUnvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memoryEPSS 0.6%CVE-2024-36243HIGHArkcompiler Ets Runtime has an out-of-bounds read vulnerabilityEPSS 0.6%CVE-2022-35938HIGHOOB read in `Gather_nd` op in TensorFlow Lite MicroEPSS 0.6%CVE-2026-28693HIGHImageMagick has an integer overflow in DIB coder can result in out of bounds read or writeEPSS 0.6%CVE-2026-34588HIGHOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteEPSS 0.6%CVE-2026-92925HIGHRedis: redis: out-of-bounds read via crafted cluster bus packetsEPSS 0.6%CVE-2026-84549HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TaEPSS 0.6%CVE-2023-0049HIGHOut-of-bounds Read in vim/vimEPSS 0.6%CVE-2026-73515HIGHPostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf BufferEPSS 0.6%CVE-2022-35937HIGHOOB read in `Gather_nd` op in TensorFlow LiteEPSS 0.6%CVE-2026-19643MEDIUMOut-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platformsEPSS 0.6%CVE-2024-24564LOWVyper extract32 can ready dirty memoryEPSS 0.6%CVE-2022-32842HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS MoEPSS 0.6%CVE-2026-28859MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS EPSS 0.6%CVE-2026-20829MEDIUMTPM Trustlet Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-20835MEDIUMCapability Access Management Service (camsvc) Information Disclosure VulnerabilityEPSS 0.6%