Falhas do tipo CWE-125

5.177 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2024-54108MEDIUMRead/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.2%CVE-2026-93543HIGHOut-of-bounds read in libXi's XI2 class parserEPSS 0.2%CVE-2025-24449MEDIUMIllustrator | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2025-27180MEDIUMSubstance3D - Modeler | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2026-93542MEDIUMOut-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()EPSS 0.2%CVE-2026-93541MEDIUMOut-of-bounds read in libXi's XQueryDeviceState()EPSS 0.2%CVE-2024-45466HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2024-45465HIGHA vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiEPSS 0.2%CVE-2022-32916MEDIUMAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issEPSS 0.2%CVE-2024-20793MEDIUMIllustrator 2024 TIF file parsing Out Of Bound Read Information disclosure vulnerabilityEPSS 0.2%CVE-2024-20725MEDIUMAdobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability IEPSS 0.2%CVE-2024-34135MEDIUMAdobe Illustrator CC 2023 v27.9 Vulnerability IIEPSS 0.2%CVE-2024-31412HIGHOut-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially craftedEPSS 0.2%CVE-2026-60073MEDIUMAutomationDirect Productivity Suite Out-of-bounds ReadEPSS 0.2%CVE-2023-32270HIGHAccess of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 filEPSS 0.2%CVE-2026-93544MEDIUMOut-of-bounds read in libXi's XI2 XIQueryDevice reply parsingEPSS 0.2%CVE-2023-51456MEDIUMA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%CVE-2024-57958MEDIUMOut-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perforEPSS 0.2%CVE-2025-30308MEDIUMXMPWorker | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2024-0102LOWNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiEPSS 0.2%