Falhas do tipo CWE-125

5.094 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2019-11042MEDIUMheap-buffer-overflow on exif_process_user_comment in EXIF extensionEPSS 4.4%CVE-2019-11035MEDIUMHeap over-read in PHP EXIF extensionEPSS 4.4%CVE-2021-28621HIGHAdobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 4.3%CVE-2021-20277—A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leaEPSS 4.3%CVE-2020-7067HIGHOOB Read in urldecode()EPSS 4.3%CVE-2020-7064MEDIUMUse-of-uninitialized-value in exifEPSS 4.3%CVE-2019-6735—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction iEPSS 4.3%CVE-2019-6733—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiEPSS 4.3%CVE-2019-3823MEDIUMlibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP.EPSS 4.3%CVE-2021-40729LOWAdobe Acrobat Reader DC PDF Out-of-Bound Read Vulnerability Information DisclosureEPSS 4.3%CVE-2024-30025HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 4.3%CVE-2020-8852LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. User intEPSS 4.2%CVE-2020-9749HIGHOut-of-bounds read vulnerability in Adobe Animate 20.5EPSS 4.1%CVE-2018-9950—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User iEPSS 4.1%CVE-2018-16451CRITICALThe SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.EPSS 4.1%CVE-2012-1571MEDIUMfile before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file tEPSS 4.1%CVE-2019-11034MEDIUMHeap over-read in PHP EXIF extensionEPSS 4.1%CVE-2018-17699—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User inEPSS 4.1%CVE-2019-6732—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiEPSS 4.1%CVE-2019-11046LOWBuffer underflow in bc_shift_addsubEPSS 4.1%