Falhas do tipo CWE-125

5.094 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2020-7061MEDIUMheap-buffer-overflow in phar_extract_fileEPSS 4.1%CVE-2018-14465HIGHThe RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().EPSS 4.1%CVE-2019-11040MEDIUMHeap buffer overflow in EXIF extensionEPSS 4.1%CVE-2021-28573MEDIUMAdobe Animate out-of-bounds read vulnerability could lead to information exposureEPSS 4.1%CVE-2023-46724HIGHSQUID-2023:4 Denial of Service in SSL Certificate validationEPSS 4.0%CVE-2020-8870HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interacEPSS 4.0%CVE-2018-14461HIGHThe LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().EPSS 4.0%CVE-2018-14468HIGHThe FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().EPSS 4.0%CVE-2018-14467HIGHThe BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).EPSS 4.0%CVE-2018-14462HIGHThe ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().EPSS 4.0%CVE-2018-14470HIGHThe Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().EPSS 4.0%CVE-2021-39821HIGHAdobe InDesign TIF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 4.0%CVE-2020-15630LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. UserEPSS 4.0%CVE-2021-28565MEDIUMAdobe Acrobat Reader out-of-bounds read could lead to information exposureEPSS 3.9%CVE-2018-17671—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User inEPSS 3.9%CVE-2018-14882CRITICALThe ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.EPSS 3.9%CVE-2018-16230CRITICALThe BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).EPSS 3.9%CVE-2019-13325HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interacEPSS 3.9%CVE-2018-17700—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%CVE-2018-17701—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%