Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2026-95392MEDIUMBuffer Over-read in WiresharkEPSS 0.2%CVE-2023-28554MEDIUMBuffer Over-read in Qualcomm IPCEPSS 0.2%CVE-2023-28566MEDIUMBuffer Over-read in WLAN HALEPSS 0.2%CVE-2023-28553MEDIUMBuffer Over-read in WLAN HostEPSS 0.2%CVE-2023-28569MEDIUMBuffer Over-read in WLAN HALEPSS 0.2%CVE-2023-28563MEDIUMBuffer Over-read in IOE FirmwareEPSS 0.2%CVE-2021-22552MEDIUMMemory overread secure enclave in Asylo 0.6.2EPSS 0.2%CVE-2023-28568MEDIUMBuffer Over-read in WLAN HALEPSS 0.2%CVE-2026-27799MEDIUMImageMagick has a heap Buffer Over-read in its DJVU image format handlerEPSS 0.1%CVE-2026-46149HIGHscsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()EPSS 0.1%CVE-2026-70652LOWlibvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain mapEPSS 0.1%CVE-2025-4582MEDIUMBuffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.EPSS 0.1%CVE-2022-38671—In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneEPSS 0.1%CVE-2024-23366MEDIUMBuffer Over-read in Automotive AutonomyEPSS 0.1%CVE-2024-33047HIGHBuffer Over-read in DisplayEPSS 0.1%CVE-2022-44446MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-33221MEDIUMBuffer over-read in Trusted Execution EnvironmentEPSS 0.1%CVE-2022-44445MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-39130MEDIUMIn face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in EPSS 0.1%CVE-2022-42759MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%