Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2023-33040HIGHBuffer Over-read in Data ModemEPSS 0.3%CVE-2026-57968HIGHWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-50435HIGHWindows Overlay Filter Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-68875HIGHWindows NTFS Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-50402HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-69582HIGHWindows Volume Manager Extension Driver Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-55084MEDIUMOut of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()EPSS 0.3%CVE-2025-55092MEDIUMPotential out of bound read in _nx_ipv4_option_process()EPSS 0.3%CVE-2024-33018HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2026-8463MEDIUMCrypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded inputEPSS 0.3%CVE-2026-42828HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2024-21477HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2023-43533HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2023-33116HIGHBuffer over-read without Checking Size of Input in WLAN HostEPSS 0.3%CVE-2023-33112HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2024-33070HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2024-38397HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2024-33049HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2024-21479HIGHBuffer Over-read in AudioEPSS 0.3%CVE-2023-43539HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%