Falhas do tipo CWE-125

5.120 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2022-37363HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.8%CVE-2022-37350HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.8%CVE-2022-37366HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.8%CVE-2022-37367HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.8%CVE-2026-21863HIGHMalformed Valkey Cluster bus message can lead to Remote DoSEPSS 0.8%CVE-2024-41721HIGHbhyve(8) out-of-bounds read access via XHCI emulationEPSS 0.8%CVE-2024-28537CRITICALTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function.EPSS 0.8%CVE-2024-32286CRITICALTenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.EPSS 0.8%CVE-2024-41311HIGHIn Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can leaEPSS 0.8%CVE-2023-28866MEDIUMIn the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to EPSS 0.8%CVE-2024-11131CRITICALA vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unsEPSS 0.8%CVE-2022-46872HIGHAn attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC mesEPSS 0.8%CVE-2026-2705MEDIUMOpen Babel MOL2 File atom.h SetFormalCharge out-of-boundsEPSS 0.8%CVE-2022-23482NONEOut-of-Bound Read in xrdpEPSS 0.8%CVE-2024-32662HIGHFreeRDP rdp_redirection_read_base64_wchar out of bound readEPSS 0.8%CVE-2024-49028HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-23481NONEOut-of-Bound Read in xrdpEPSS 0.8%CVE-2026-69717HIGHWindows Group Policy Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-69332HIGHWindows NTFS Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-69427HIGHMicrosoft VOLSNAP.SYS Elevation of Privilege VulnerabilityEPSS 0.8%