Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2023-35324MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-31080HIGHXorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsEPSS 0.5%CVE-2024-31081HIGHXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceEPSS 0.5%CVE-2026-55238MEDIUMxrdp: Malformed Confirm Active capability sets cause out-of-bounds readsEPSS 0.5%CVE-2024-9029HIGHFreeimage: heap buffer overflow in tiff_read_iptc_profileEPSS 0.5%CVE-2026-83788MEDIUMWindows rndismp6.sys Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-49684MEDIUMWindows Storage Port Driver Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-58013MEDIUMGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"EPSS 0.5%CVE-2025-53736MEDIUMMicrosoft Word Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-21697MEDIUMWindows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-58012MEDIUMGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()EPSS 0.5%CVE-2026-58010MEDIUMGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()EPSS 0.5%CVE-2026-57185MEDIUMAsterisk: Buffer over-read in Asterisk PJSIP MWI body parserEPSS 0.5%CVE-2024-52878HIGHAn issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before versioEPSS 0.5%CVE-2024-52877HIGHAn issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before versioEPSS 0.5%CVE-2024-52879HIGHAn issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before versioEPSS 0.5%CVE-2026-76653MEDIUMMissing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600EPSS 0.5%CVE-2025-7745MEDIUMModbus TCP buffer overreadEPSS 0.5%CVE-2023-33081HIGHBuffer over-read in WLAN FirmwareEPSS 0.5%CVE-2023-33097HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%