Falhas do tipo CWE-125

5.094 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2018-17693—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%CVE-2018-17701—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaEPSS 3.9%CVE-2019-13324HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interacEPSS 3.9%CVE-2019-13513—In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-oEPSS 3.9%CVE-2022-23123MEDIUMThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not reEPSS 3.8%CVE-2020-27840—A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings witEPSS 3.8%CVE-2024-0519HIGHOut of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption EPSS 3.8%KEVCVE-2021-28574MEDIUMAdobe Animate out-of-bounds read vulnerability could lead to information exposureEPSS 3.8%CVE-2021-28575MEDIUMAdobe Animate out-of-bounds read vulnerability could lead to information exposureEPSS 3.8%CVE-2017-7558MEDIUMA kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() fEPSS 3.8%CVE-2021-34858HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required tEPSS 3.8%CVE-2018-16228CRITICALThe HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().EPSS 3.7%CVE-2022-28330—read beyond bounds in mod_isapiEPSS 3.7%CVE-2018-19004—LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data EPSS 3.7%CVE-2021-43845HIGHPrevent out-of-bounds read in PJSIPEPSS 3.7%CVE-2024-32459CRITICALFreeRDP Out-Of-Bounds Read in ncrush_decompressEPSS 3.7%CVE-2019-6729—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirEPSS 3.7%CVE-2019-6731—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is reEPSS 3.7%CVE-2025-12036HIGHOut of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access EPSS 3.7%CVE-2016-9037HIGHAn exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A speciallyEPSS 3.7%