Fallos del tipo CWE-126

527 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2024-33048HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-23364HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2024-33050HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2024-53026HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%CVE-2024-49839HIGHBuffer Over-read in WLAN Host CmnEPSS 0.3%CVE-2025-59192HIGHStorport.sys Driver Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-66038LOWOpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointersEPSS 0.3%CVE-2024-33019HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33020HIGHBuffer Over-read in WLAN HOSTEPSS 0.3%CVE-2024-33026HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33015HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33013HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33011HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33025HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2026-41898HIGHrust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peerEPSS 0.3%CVE-2024-33012HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-49846HIGHBuffer Over-read in Multi-Mode Call ProcessorEPSS 0.3%CVE-2024-21456MEDIUMBuffer Over-read in WLAN HOSTEPSS 0.3%CVE-2026-47088LOWAn issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticatedEPSS 0.3%CVE-2025-21488HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%