Falhas do tipo CWE-125

6.000 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2024-32459CRITICALFreeRDP Out-Of-Bounds Read in ncrush_decompressEPSS 3.7%CVE-2019-6729—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirEPSS 3.7%CVE-2019-6731—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is reEPSS 3.7%CVE-2016-9037HIGHAn exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A speciallyEPSS 3.7%CVE-2021-34858HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required tEPSS 3.7%CVE-2021-21050HIGHAdobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 3.6%CVE-2021-21049HIGHAdobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 3.6%CVE-2022-28231HIGHAdobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 3.6%CVE-2017-7558MEDIUMA kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() fEPSS 3.6%CVE-2022-28239HIGHAdobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 3.6%CVE-2017-13028CRITICALThe BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().EPSS 3.6%CVE-2021-28576MEDIUMAdobe Animate out-of-bounds read vulnerability could lead to information exposureEPSS 3.6%CVE-2018-14819—Fuji Electric V-Server 4.0.3.0 and prior, An out-of-bounds read vulnerability has been identified, which may allow remote code execution.EPSS 3.6%CVE-2020-1763HIGHAn out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attackerEPSS 3.6%CVE-2020-27737MEDIUMA vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <EPSS 3.6%CVE-2019-25013MEDIUMThe iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR eEPSS 3.6%CVE-2021-21074HIGHAdobe Animate out-of-bounds read vulnerabilityEPSS 3.5%CVE-2021-21076HIGHAdobe Animate out-of-bounds read vulnerabilityEPSS 3.5%CVE-2024-36251HIGHThe web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafteEPSS 3.5%CVE-2018-10623—Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positiEPSS 3.5%