Weaknesses of type CWE-126

527 results

Leitura além dos limites de buffer na pilha

Ocorre quando o código lê dados além do tamanho alocado de um buffer armazenado na pilha (stack). O programa acessa memória que não lhe pertence, podendo expor dados sensíveis como variáveis locais, endereços de retorno ou informações de contexto. Diferente de um buffer overflow, aqui não há escrita destrutiva, mas a leitura não autorizada compromete confidencialidade.

Example

Uma função copia uma string de entrada para um buffer fixo de 64 bytes, mas depois lê 128 bytes desse buffer para enviá-lo a um log remoto. O atacante fornece uma string curta, mas o programa vaza dados armazenados logo após o buffer na pilha (variáveis locais de outras funções, ponteiros).

How to mitigate

Use funções seguras com limite de tamanho (como snprintf em vez de sprintf, strncpy em vez de strcpy). Sempre rastreie e valide o comprimento real dos dados antes de ler. Ative proteções de compilação como stack canaries e AddressSanitizer em desenvolvimento para detectar acessos fora dos limites.

CVE-2025-21454HIGHBuffer Over-read in WLAN Embedded SWEPSS 0.2%CVE-2025-21446HIGHBuffer Over-read in WLAN FirmwareEPSS 0.2%CVE-2026-6532MEDIUMBuffer Over-read in WiresharkEPSS 0.2%CVE-2026-14678MEDIUMPostgreSQL pg_trgm picksplit reads past end of bufferEPSS 0.2%CVE-2026-18024MEDIUMPostgreSQL ascii() function reads past end of bufferEPSS 0.2%CVE-2023-53159MEDIUMThe openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.EPSS 0.2%CVE-2025-59933MEDIUMlibvips is vulnerable to Buffer Over-Read in poppler-based pdfloadEPSS 0.2%CVE-2026-40341LOWlibgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoExEPSS 0.2%CVE-2026-76885LOWBuffer Over-read in WiresharkEPSS 0.2%CVE-2026-76884LOWBuffer Over-read in WiresharkEPSS 0.2%CVE-2022-4434MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to EPSS 0.2%CVE-2022-4432MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elEPSS 0.2%CVE-2022-4435MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker EPSS 0.2%CVE-2022-4433MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elEPSS 0.2%CVE-2026-26282MEDIUMNanaZip has DotNet Single file OOB Heap ReadEPSS 0.2%CVE-2026-65936MEDIUMRS9116W/SiWx917 malformed packet with increased length field causes memory leakEPSS 0.2%CVE-2026-65933MEDIUMBT122 malformed packet with increased length field causes memory leakEPSS 0.2%CVE-2026-11787MEDIUM389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingEPSS 0.2%CVE-2026-18238MEDIUMOOBR in rpcap client in libpcap before 1.10.7EPSS 0.2%CVE-2026-45684MEDIUMOpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffersEPSS 0.2%