Falhas do tipo CWE-125

5.119 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2023-35629MEDIUMMicrosoft USBHUB 3.0 Device Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-24055MEDIUMWindows USB Video Class System Driver Information Disclosure VulnerabilityEPSS 0.9%CVE-2023-0645MEDIUMOut of Bounds read in libjxlEPSS 0.9%CVE-2024-5497HIGHOut of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage EPSS 0.9%CVE-2023-36728MEDIUMMicrosoft SQL Server Denial of Service VulnerabilityEPSS 0.9%CVE-2023-29461HIGHRockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-29460HIGHRockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-30596CRITICALTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function.EPSS 0.9%CVE-2024-38101MEDIUMWindows Layer-2 Bridge Network Driver Denial of Service VulnerabilityEPSS 0.8%CVE-2024-38102MEDIUMWindows Layer-2 Bridge Network Driver Denial of Service VulnerabilityEPSS 0.8%CVE-2026-5314MEDIUMNothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-boundsEPSS 0.8%CVE-2026-5315MEDIUMNothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-boundsEPSS 0.8%CVE-2023-4458MEDIUMKernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerabilityEPSS 0.8%CVE-2022-23560HIGHRead and Write outside of bounds in TFLiteEPSS 0.8%CVE-2025-2784HIGHLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentEPSS 0.8%CVE-2022-23574HIGHOut of bounds read and write in TensorflowEPSS 0.8%CVE-2026-2704MEDIUMOpen Babel CIF File transform3d.cpp DescribeAsString out-of-boundsEPSS 0.8%CVE-2019-13512—Fuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read vulnerability, which may allow an attacker to read limiEPSS 0.8%CVE-2024-47778MEDIUMGHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunkEPSS 0.8%CVE-2025-31209MEDIUMAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS SeqEPSS 0.8%