Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2023-43539HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2024-33071HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2025-60729MEDIUMPerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath functionEPSS 0.3%CVE-2024-7347MEDIUMNGINX MP4 module vulnerabilityEPSS 0.3%CVE-2023-43512HIGHBuffer Over-read in Qualcomm ESLEPSS 0.3%CVE-2024-33014HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2026-59840MEDIUMA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0EPSS 0.3%CVE-2025-11616MEDIUMBuffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCPEPSS 0.3%CVE-2025-11617MEDIUMBuffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCPEPSS 0.3%CVE-2026-69316MEDIUMWindows Overlay Filter Information Disclosure VulnerabilityEPSS 0.3%CVE-2025-55093MEDIUMOut of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messagesEPSS 0.3%CVE-2021-22563MEDIUMMemory Overread in libjxlEPSS 0.3%CVE-2024-49838HIGHBuffer Over-read in WLAN HOSTEPSS 0.3%CVE-2024-53026HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%CVE-2023-20112HIGHCisco Access Point Software Association Request Denial of Service VulnerabilityEPSS 0.3%CVE-2026-18024MEDIUMPostgreSQL ascii() function reads past end of bufferEPSS 0.3%CVE-2026-14678MEDIUMPostgreSQL pg_trgm picksplit reads past end of bufferEPSS 0.3%CVE-2025-59192HIGHStorport.sys Driver Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-95904MEDIUMWindows Event Logging Service Information Disclosure VulnerabilityEPSS 0.3%CVE-2024-11596HIGHBuffer Over-read in WiresharkEPSS 0.3%