Falhas do tipo CWE-125

5.077 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2022-32912HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. ProceEPSS 1.5%CVE-2020-11095LOWGlobal OOB read in update_recv_primary_order in FreeRDPEPSS 1.5%CVE-2021-32938—Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of pEPSS 1.4%CVE-2021-44700LOWAdobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-53805HIGHHTTP.sys Denial of Service VulnerabilityEPSS 1.4%CVE-2025-32715MEDIUMRemote Desktop Protocol Client Information Disclosure VulnerabilityEPSS 1.4%CVE-2023-39180MEDIUMKernel: ksmbd: read request memory leak denial-of-service vulnerabilityEPSS 1.4%CVE-2020-16201—Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited bEPSS 1.4%CVE-2022-0319MEDIUMOut-of-bounds Read in vim/vimEPSS 1.4%CVE-2018-6340HIGHThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached EPSS 1.4%CVE-2023-21691HIGHMicrosoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure VulnerabilityEPSS 1.4%CVE-2020-11086LOWOut-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`EPSS 1.4%CVE-2020-11087LOWOut-of-bounds Read in FreeRDPEPSS 1.4%CVE-2021-31506LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6EPSS 1.4%CVE-2018-20618HIGHok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.EPSS 1.4%CVE-2020-11097LOWOOB read in ntlm_av_pair_get in FreeRDPEPSS 1.4%CVE-2025-29960MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2022-2881MEDIUMBuffer overread in statistics channel codeEPSS 1.4%CVE-2021-43752LOWAdobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.4%CVE-2022-2257HIGHOut-of-bounds Read in vim/vimEPSS 1.4%