Weaknesses of type CWE-126

581 results

Leitura além dos limites de buffer na pilha

Ocorre quando o código lê dados além do tamanho alocado de um buffer armazenado na pilha (stack). O programa acessa memória que não lhe pertence, podendo expor dados sensíveis como variáveis locais, endereços de retorno ou informações de contexto. Diferente de um buffer overflow, aqui não há escrita destrutiva, mas a leitura não autorizada compromete confidencialidade.

Example

Uma função copia uma string de entrada para um buffer fixo de 64 bytes, mas depois lê 128 bytes desse buffer para enviá-lo a um log remoto. O atacante fornece uma string curta, mas o programa vaza dados armazenados logo após o buffer na pilha (variáveis locais de outras funções, ponteiros).

How to mitigate

Use funções seguras com limite de tamanho (como snprintf em vez de sprintf, strncpy em vez de strcpy). Sempre rastreie e valide o comprimento real dos dados antes de ler. Ative proteções de compilação como stack canaries e AddressSanitizer em desenvolvimento para detectar acessos fora dos limites.

CVE-2026-76885LOWBuffer Over-read in WiresharkEPSS 0.2%CVE-2026-76884LOWBuffer Over-read in WiresharkEPSS 0.2%CVE-2023-43568MEDIUMA buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with eleEPSS 0.2%CVE-2023-43537MEDIUMBuffer Over-read in WLAN HostEPSS 0.2%CVE-2024-21457MEDIUMBuffer Over-read in WLAN Host CommunicationEPSS 0.2%CVE-2024-21458MEDIUMBuffer Over-read in WLAN HOSTEPSS 0.2%CVE-2026-21367HIGHBuffer Over-read in WLAN FirmwareEPSS 0.2%CVE-2026-6575MEDIUMPostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats arrayEPSS 0.2%CVE-2026-26282MEDIUMNanaZip has DotNet Single file OOB Heap ReadEPSS 0.2%CVE-2024-12975LOWSilicon Labs CPC can leak information in full duplex SPIEPSS 0.2%CVE-2026-94286HIGHOut-of-bounds read in libXtst's RECORD reply parserEPSS 0.2%CVE-2026-6532MEDIUMBuffer Over-read in WiresharkEPSS 0.2%CVE-2026-3203MEDIUMBuffer Over-read in WiresharkEPSS 0.2%CVE-2025-59933MEDIUMlibvips is vulnerable to Buffer Over-Read in poppler-based pdfloadEPSS 0.2%CVE-2022-4432MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elEPSS 0.2%CVE-2022-4434MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to EPSS 0.2%CVE-2022-4433MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elEPSS 0.2%CVE-2022-4435MEDIUMA buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker EPSS 0.2%CVE-2026-46471MEDIUMAn issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid functEPSS 0.2%CVE-2026-40341LOWlibgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoExEPSS 0.2%