Falhas do tipo CWE-125

6.000 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2021-39862LOWAdobe FrameMaker PostScript File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.5%CVE-2022-48303MEDIUMGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to cEPSS 1.5%CVE-2021-44700LOWAdobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.5%CVE-2024-38240HIGHWindows Remote Access Connection Manager Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2021-38561HIGHgolang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index EPSS 1.5%CVE-2022-1899HIGHOut-of-bounds Read in radareorg/radare2EPSS 1.5%CVE-2023-39353MEDIUMMissing offset validation leading to Out Of Bound Read in FreeRDPEPSS 1.5%CVE-2023-40188MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.5%CVE-2019-11935—Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versEPSS 1.5%CVE-2022-32912HIGHAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. ProceEPSS 1.5%CVE-2021-3643—A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker toEPSS 1.5%CVE-2018-14814—WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied datEPSS 1.5%CVE-2022-1304HIGHAn out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary codEPSS 1.5%CVE-2025-9086HIGHOut of bounds read for cookie pathEPSS 1.5%CVE-2020-27842—There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openEPSS 1.5%CVE-2020-27845—There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpegEPSS 1.5%CVE-2021-43752LOWAdobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.5%CVE-2025-29961MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.4%CVE-2021-32938—Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of pEPSS 1.4%CVE-2023-39180MEDIUMKernel: ksmbd: read request memory leak denial-of-service vulnerabilityEPSS 1.4%