Fallos del tipo CWE-125
5126 resultadosLeitura fora dos limites do buffer
Ocorre quando o código tenta acessar dados além das fronteiras válidas de um buffer (array, string, estrutura), lendo memória que não deveria. O risco é expor informações sensíveis da memória adjacente ou causar crash da aplicação.
Ejemplo
Uma função que processa strings sem validar o tamanho da entrada pode ler bytes além do final da string alocada, vazando dados de memória ou causando segmentation fault. Exemplo: strcpy() copiando para buffer menor sem checagem.
Cómo mitigar
Use funções seguras com limite explícito (strlen com buffer_size, strncpy, snprintf), valide índices antes de acessar arrays, e ative verificações de limite em tempo de compilação ou execução (-ftrapv, ASAN, bounds checking).
CVE-2026-59140CRITICALData::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query pathsEPSS 0.5%CVE-2024-24583MEDIUMMultiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to aEPSS 0.5%CVE-2026-59142CRITICALData::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm_str_copyEPSS 0.5%CVE-2026-59139CRITICALData::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep_recv_lockedEPSS 0.5%CVE-2026-59141CRITICALData::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx_find_lockedEPSS 0.5%CVE-2026-59145CRITICALData::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_findEPSS 0.5%CVE-2024-28894MEDIUMOut-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP NEPSS 0.5%CVE-2026-31967MEDIUMHTSlib CRAM reader has out-of-bounds read due to improper validation of inputEPSS 0.5%CVE-2024-24584MEDIUMMultiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to aEPSS 0.5%CVE-2026-57157MEDIUMOut-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelNameEPSS 0.5%CVE-2026-62292HIGHlibheif: Out-of-bounds read in uncompressed unci tile range slicingEPSS 0.5%CVE-2024-56083HIGHCognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.deEPSS 0.5%CVE-2026-62814MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62745MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62742MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62720MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62718MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62714MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62715MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-9758LOWTungsten Automation Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.5%