Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2025-21427HIGHBuffer Over-read in Data HLOS - LNXEPSS 0.2%CVE-2025-21454HIGHBuffer Over-read in WLAN Embedded SWEPSS 0.2%CVE-2025-21449HIGHBuffer Over-read in WLAN Embedded SWEPSS 0.2%CVE-2025-21446HIGHBuffer Over-read in WLAN FirmwareEPSS 0.2%CVE-2025-21463HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.2%CVE-2023-43555HIGHBuffer Over-read in VideoEPSS 0.2%CVE-2026-28364HIGHIn OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution EPSS 0.2%CVE-2026-26184HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2023-3649MEDIUMBuffer Over-read in WiresharkEPSS 0.2%CVE-2026-5772LOWMatchDomainName 1-Byte Stack Buffer Over-Read in Hostname ValidationEPSS 0.2%CVE-2023-6992MEDIUMMemory corruption issues is Cloudflare zlib implementationEPSS 0.2%CVE-2025-47328HIGHBuffer Over-read in WLAN HALEPSS 0.2%CVE-2026-37532HIGHAGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotp_continue_receive (receive.c:87-EPSS 0.2%CVE-2023-53159MEDIUMThe openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.EPSS 0.2%CVE-2023-43574MEDIUMA buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attackeEPSS 0.2%CVE-2023-43572MEDIUMA buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevaEPSS 0.2%CVE-2025-12745MEDIUMQuickJS quickjs.c js_array_buffer_slice buffer over-readEPSS 0.2%CVE-2025-47318HIGHBuffer Over-read in BT ControllerEPSS 0.2%CVE-2025-47403MEDIUMBuffer Over-read in WLAN FirmwareEPSS 0.2%CVE-2025-47401MEDIUMBuffer Over-read in WLAN HALEPSS 0.2%