Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2023-35638HIGHDHCP Server Service Denial of Service VulnerabilityEPSS 3.3%CVE-2023-35643HIGHDHCP Server Service Information Disclosure VulnerabilityEPSS 2.6%CVE-2023-36581HIGHMicrosoft Message Queuing (MSMQ) Denial of Service VulnerabilityEPSS 2.5%CVE-2023-36392HIGHDHCP Server Service Denial of Service VulnerabilityEPSS 2.5%CVE-2025-21176HIGH.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityEPSS 2.4%CVE-2026-26169MEDIUMWindows Kernel Memory Information Disclosure VulnerabilityEPSS 2.3%CVE-2022-1720MEDIUMBuffer Over-read in function grab_file_name in vim/vimEPSS 2.2%CVE-2020-8244—A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even tyEPSS 2.1%CVE-2023-28267MEDIUMRemote Desktop Protocol Client Information Disclosure VulnerabilityEPSS 2.1%CVE-2023-38172HIGHMicrosoft Message Queuing (MSMQ) Denial of Service VulnerabilityEPSS 2.0%CVE-2022-1629MEDIUMBuffer Over-read in function find_next_quote in vim/vimEPSS 1.9%CVE-2023-24942HIGHRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.9%CVE-2023-35330HIGHWindows Extended Negotiation Denial of Service VulnerabilityEPSS 1.9%CVE-2025-26672MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.9%CVE-2025-26664MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.9%CVE-2024-43475HIGHMicrosoft Windows Admin Center Information Disclosure VulnerabilityEPSS 1.8%CVE-2019-5432—A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.EPSS 1.8%CVE-2019-3563—Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflowEPSS 1.7%CVE-2025-21203MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.7%CVE-2022-22519HIGHSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.EPSS 1.7%