Fallos del tipo CWE-125
5126 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-20835MEDIUMCapability Access Management Service (camsvc) Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-25178CRITICALLuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.EPSS 0.6%CVE-2024-11614HIGHDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryEPSS 0.6%CVE-2026-34608MEDIUMnanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB ReadEPSS 0.6%CVE-2025-55100LOWPotential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()EPSS 0.6%CVE-2022-42342MEDIUMAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.6%CVE-2022-41580CRITICALThe HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousEPSS 0.6%CVE-2024-5991CRITICALBuffer overread in domain name matchingEPSS 0.6%CVE-2026-10817MEDIUMInsufficient input validation leading to memory overreadEPSS 0.6%CVE-2023-45682MEDIUMWild address read in vorbis_decode_packet_rest in stb_vorbisEPSS 0.6%CVE-2026-45485LOWMicrosoft Office Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-44237MEDIUMAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, mEPSS 0.6%CVE-2024-44283MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS VenEPSS 0.6%CVE-2022-38436HIGHAdobe Illustrator CDR File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-28448MEDIUMVersionize is lacking bound checks, potentially leading to out of bounds memory accessEPSS 0.6%CVE-2022-1354—A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a cEPSS 0.6%CVE-2024-39695MEDIUMExiv2 has an out-of-bounds read in AsfVideo::streamPropertiesEPSS 0.6%CVE-2022-32852HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciousEPSS 0.6%CVE-2024-20505MEDIUMClamAV Memory Handling DoSEPSS 0.6%CVE-2024-31029HIGHAn issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause aEPSS 0.6%