Falhas do tipo CWE-125

5.119 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2020-5254LOWNetHack hilite_status parsing privilege escalationEPSS 1.1%CVE-2022-43596MEDIUMAn information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4EPSS 1.1%CVE-2022-35261MEDIUMA denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted nEPSS 1.1%CVE-2026-69428HIGHWindows LDAP - Lightweight Directory Access Protocol Denial of Service VulnerabilityEPSS 1.1%CVE-2026-69760HIGHWindows Kerberos Denial of Service VulnerabilityEPSS 1.1%CVE-2026-77895HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.1%CVE-2026-69342HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 1.1%CVE-2020-5134—A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulEPSS 1.1%CVE-2022-43592MEDIUMAn information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A speciaEPSS 1.1%CVE-2024-44246MEDIUMThe issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iEPSS 1.1%CVE-2025-5456HIGHA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA GatewaEPSS 1.1%CVE-2021-29463LOWOut-of-bounds read in Exiv2::WebPImage::doWriteMetadataEPSS 1.1%CVE-2022-34288—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34282—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34283—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34285—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-0173CRITICALOut-of-bounds Read in radareorg/radare2EPSS 1.1%CVE-2021-0261HIGHJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requestsEPSS 1.1%CVE-2023-39179HIGHKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityEPSS 1.1%CVE-2025-63657HIGHAn out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a DenialEPSS 1.1%