Falhas do tipo CWE-125

5.178 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2022-32916MEDIUMAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issEPSS 0.2%CVE-2026-93544MEDIUMOut-of-bounds read in libXi's XI2 XIQueryDevice reply parsingEPSS 0.2%CVE-2024-31412HIGHOut-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially craftedEPSS 0.2%CVE-2024-34135MEDIUMAdobe Illustrator CC 2023 v27.9 Vulnerability IIEPSS 0.2%CVE-2024-20790MEDIUMAdobe Dimension Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing FBX fileEPSS 0.2%CVE-2025-30308MEDIUMXMPWorker | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2023-27945MEDIUMThis issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandbEPSS 0.2%CVE-2024-50115HIGHKVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memoryEPSS 0.2%CVE-2026-93541MEDIUMOut-of-bounds read in libXi's XQueryDeviceState()EPSS 0.2%CVE-2024-20793MEDIUMIllustrator 2024 TIF file parsing Out Of Bound Read Information disclosure vulnerabilityEPSS 0.2%CVE-2025-6657LOWPDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.2%CVE-2025-54235MEDIUMSubstance3D - Modeler | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2025-6662LOWPDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.2%CVE-2025-6658LOWPDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.2%CVE-2024-49536MEDIUMAudition | Out-of-bounds Read (CWE-125)EPSS 0.2%CVE-2025-6653LOWPDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.2%CVE-2024-30309MEDIUMAdobe Substance 3D Painter TGA File Parsing Acces Violation Read VulnerabilityEPSS 0.2%CVE-2025-54330MEDIUMAn issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q->bufs[] in theEPSS 0.2%CVE-2025-6643LOWPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.2%CVE-2025-6650LOWPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.2%