Falhas do tipo CWE-125
5.183 resultadosLeitura fora dos limites de memória
Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.
Exemplo
Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.
Como mitigar
Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).
CVE-2024-27234MEDIUMIn fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclEPSS 0.1%CVE-2024-29750MEDIUMIn km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disEPSS 0.1%CVE-2023-40112MEDIUMIn ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclEPSS 0.1%CVE-2024-29742MEDIUMIn apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informEPSS 0.1%CVE-2018-9435MEDIUMIn gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local inforEPSS 0.1%CVE-2025-20662MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2025-20661MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2025-20660MEDIUMIn PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if aEPSS 0.1%CVE-2018-9408MEDIUMIn m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of
Bounds Read due to a missing bounds check. This could lead toEPSS 0.1%CVE-2024-27235MEDIUMIn plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information discloEPSS 0.1%CVE-2022-47323MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2024-20091MEDIUMIn vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2024-29783MEDIUMIn tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosEPSS 0.1%CVE-2024-40656MEDIUMIn handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused EPSS 0.1%CVE-2024-20116MEDIUMIn cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eEPSS 0.1%CVE-2025-20776MEDIUMIn display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliEPSS 0.1%CVE-2024-56184MEDIUMIn static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inEPSS 0.1%CVE-2023-48341MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%CVE-2023-52536MEDIUMIn faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SysEPSS 0.1%CVE-2023-48344MEDIUMIn video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nEPSS 0.1%