Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2023-33098HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2026-53587HIGHlibgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_dataEPSS 0.5%CVE-2024-3077MEDIUMBluetooth: integer underflow in gatt_find_info_rspEPSS 0.5%CVE-2026-61350MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-55606MEDIUModhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()EPSS 0.5%CVE-2026-55036HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-64905HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-83565MEDIUMWindows Encrypting File System (EFS) Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-70041MEDIUMWindows CD-ROM Driver Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-69954MEDIUMWindows Overlay Filter Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-32704HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-112404HIGHPillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsEPSS 0.4%CVE-2026-85910MEDIUMWindows StateRepository API Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-103567MEDIUMWindows Broadcast DVR User Service Information Disclosure VulnerabilityEPSS 0.4%CVE-2025-49659HIGHWindows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-33047HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2023-33048HIGHBuffer over-read in WLAN FirmwareEPSS 0.4%CVE-2023-33061HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2022-3178HIGHBuffer Over-read in gpac/gpacEPSS 0.4%CVE-2025-60720HIGHWindows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege VulnerabilityEPSS 0.4%