Falhas do tipo CWE-125

5.126 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2025-52871LOWLicense CenterEPSS 0.6%CVE-2025-30376HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-43773CRITICALAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TEPSS 0.6%CVE-2026-21900HIGHCryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok PatternEPSS 0.6%CVE-2024-30347LOWFoxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-26675HIGHWindows Subsystem for Linux Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2022-1738HIGHFuji Electric D300win Out-of-bounds ReadEPSS 0.6%CVE-2025-33062MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-9249HIGHFoxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-47993MEDIUMA Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.EPSS 0.6%CVE-2025-33055MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-30401HIGHJunos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftmanEPSS 0.6%CVE-2022-40647HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-40640HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-0284—A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggereEPSS 0.6%CVE-2025-60726HIGHMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-3406MEDIUMNothings stb Header Array stbhw_build_tileset_from_image out-of-boundsEPSS 0.6%CVE-2026-10672HIGHUnterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)EPSS 0.6%CVE-2025-54902HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-54898HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%