Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2024-26243HIGHWindows USB Print Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-33027HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2023-33026HIGHBuffer over-read in WLAN FirmwareEPSS 0.4%CVE-2026-85935MEDIUMWindows USB Driver Information Disclosure VulnerabilityEPSS 0.4%CVE-2025-62792MEDIUMWazuh vulnerable to Heap-based Buffer Over-read in w_expression_matchEPSS 0.4%CVE-2023-21660HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2023-21658HIGHBuffer Over-Read in WLAN FirmwareEPSS 0.4%CVE-2023-33015HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2023-21661HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2023-21659HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2023-33016HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2022-1769MEDIUMBuffer Over-read in vim/vimEPSS 0.4%CVE-2025-43892MEDIUMA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0EPSS 0.4%CVE-2024-45558HIGHBuffer Over-read in WLAN Host CmnEPSS 0.4%CVE-2026-69950HIGHWindows Overlay Filter Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-69942HIGHWindows Overlay Filter Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-69884HIGHWindows GDI Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-69953HIGHWindows Overlay Filter Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-69957HIGHWindows Overlay Filter Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-33271HIGHBuffer over-read in WLANEPSS 0.4%