Falhas do tipo CWE-125

6.000 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2021-26623HIGHBandisoft ARK Library Out-of-bound VulnerabilityEPSS 1.1%CVE-2025-49657HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2022-32745—A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually EPSS 1.1%CVE-2026-83521MEDIUMWindows IKE Extension Information Disclosure VulnerabilityEPSS 1.1%CVE-2026-85808HIGHWindows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityEPSS 1.1%CVE-2026-96861HIGHNetwork Device Enrollment Service (NDES) Denial of Service VulnerabilityEPSS 1.1%CVE-2026-96866HIGHNetwork Device Enrollment Service (NDES) Denial of Service VulnerabilityEPSS 1.1%CVE-2020-5134—A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulEPSS 1.1%CVE-2018-11727MEDIUMThe libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an EPSS 1.1%CVE-2018-11728MEDIUMThe libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attaEPSS 1.1%CVE-2024-44246MEDIUMThe issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iEPSS 1.1%CVE-2026-25646HIGHLIBPNG has a heap buffer overflow in png_set_quantizeEPSS 1.1%CVE-2021-29463LOWOut-of-bounds read in Exiv2::WebPImage::doWriteMetadataEPSS 1.1%CVE-2026-70281HIGHMicrosoft Office Outlook Information Disclosure VulnerabilityEPSS 1.1%CVE-2025-43445MEDIUMAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOSEPSS 1.1%CVE-2021-0261HIGHJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requestsEPSS 1.1%CVE-2026-103569HIGHWindows IKE Extension Information Disclosure VulnerabilityEPSS 1.1%CVE-2023-21699MEDIUMWindows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityEPSS 1.1%CVE-2023-39179HIGHKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityEPSS 1.1%CVE-2022-26770HIGHAn out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS MoEPSS 1.1%