Falhas do tipo CWE-125

5.126 resultados

Leitura fora dos limites de memória

Ocorre quando o código tenta ler dados de uma posição de memória fora do intervalo alocado para um buffer ou array. O programa não valida o índice ou tamanho antes de acessar, causando leitura de dados inválidos, corrupção de informações ou revelação de dados sensíveis da memória adjacente.

Exemplo

Um processador de imagem PNG lê 4 bytes de um buffer de 2 bytes para validar uma assinatura, ou uma função copia uma string sem verificar se o índice fornecido pelo usuário extrapola o tamanho real do array. Em ambos os casos, dados fora do escopo pretendido são lidos.

Como mitigar

Sempre validar índices e comprimentos contra os limites reais do buffer antes de qualquer leitura. Usar funções seguras (ex: `strncpy` em vez de `strcpy`, bounds-checking em loops) e implementar testes com entradas extremas (size zero, índices negativos, valores muito grandes).

CVE-2026-34235MEDIUMPJSIP: Heap OOB read in VPX unpacketizerEPSS 0.5%CVE-2024-24583MEDIUMMultiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to aEPSS 0.5%CVE-2026-59142CRITICALData::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm_str_copyEPSS 0.5%CVE-2026-59139CRITICALData::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep_recv_lockedEPSS 0.5%CVE-2026-59141CRITICALData::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx_find_lockedEPSS 0.5%CVE-2026-59145CRITICALData::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_findEPSS 0.5%CVE-2024-28894MEDIUMOut-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP NEPSS 0.5%CVE-2024-24584MEDIUMMultiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to aEPSS 0.5%CVE-2026-31967MEDIUMHTSlib CRAM reader has out-of-bounds read due to improper validation of inputEPSS 0.5%CVE-2026-57157MEDIUMOut-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelNameEPSS 0.5%CVE-2026-62292HIGHlibheif: Out-of-bounds read in uncompressed unci tile range slicingEPSS 0.5%CVE-2024-56083HIGHCognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.deEPSS 0.5%CVE-2026-62814MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62745MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62742MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62720MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62718MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62714MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-62715MEDIUMWindows DHCP Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-9758LOWTungsten Automation Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.5%