Falhas do tipo CWE-125

6.000 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2023-41360CRITICALAn issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream siEPSS 1.2%CVE-2022-34282—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34285—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34288—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2022-34283—A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds EPSS 1.1%CVE-2024-40789MEDIUMAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9,EPSS 1.1%CVE-2020-1888—Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affectEPSS 1.1%CVE-2020-1893—Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM EPSS 1.1%CVE-2022-0173CRITICALOut-of-bounds Read in radareorg/radare2EPSS 1.1%CVE-2024-47596MEDIUMGHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsingEPSS 1.1%CVE-2020-11089LOWOut-of-bound read in FreeRDPEPSS 1.1%CVE-2021-34342—Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak.EPSS 1.1%CVE-2020-5254LOWNetHack hilite_status parsing privilege escalationEPSS 1.1%CVE-2026-67633MEDIUMMicrosoft SQL Server Denial of Service VulnerabilityEPSS 1.1%CVE-2026-92697HIGHFastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds readEPSS 1.1%CVE-2026-66308MEDIUMSkype for Business and Lync Denial of Service VulnerabilityEPSS 1.1%CVE-2022-35271MEDIUMA denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted nEPSS 1.1%CVE-2021-44444—A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected prEPSS 1.1%CVE-2022-21728HIGHOut of bounds read in TensorflowEPSS 1.1%CVE-2024-47600MEDIUMGHSL-2024-248: GStreamer has an OOB-read in format_channel_maskEPSS 1.1%