Falhas do tipo CWE-125

5.119 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2021-44008—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_LoadeEPSS 0.9%CVE-2024-26174MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.9%CVE-2021-44009—A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_LoadeEPSS 0.9%CVE-2020-15211MEDIUMOut of bounds access in tensorflow-liteEPSS 0.9%CVE-2021-33649—When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the siEPSS 0.9%CVE-2021-33648—When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shapEPSS 0.9%CVE-2021-33650—When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access dataEPSS 0.9%CVE-2023-46569CRITICALAn out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.EPSS 0.9%CVE-2023-26253HIGHIn Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.EPSS 0.9%CVE-2026-80096HIGHWindows Remote Desktop Services Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-35263MEDIUMA denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted nEPSS 0.9%CVE-2022-24383HIGHICSA-22-090-03 Fuji Electric Alpha5EPSS 0.9%CVE-2022-35262MEDIUMA denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted nEPSS 0.9%CVE-2024-34200HIGHTOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function.EPSS 0.9%CVE-2021-32614—A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC bytes from it. The EPSS 0.9%CVE-2024-4059MEDIUMOut of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML paEPSS 0.9%CVE-2020-15265MEDIUMSegfault in TensorflowEPSS 0.9%CVE-2021-3548—A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() functioEPSS 0.9%CVE-2026-8186MEDIUMOpen5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-boundsEPSS 0.9%CVE-2020-15208HIGHData corruption in tensorflow-liteEPSS 0.9%