Fallos del tipo CWE-126

581 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2022-42779MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-39132MEDIUMIn camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneEPSS 0.1%CVE-2022-42780MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42774MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-33273HIGHBuffer over-read in Trusted Execution EnvironmentEPSS 0.1%CVE-2022-44445MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-44443MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-39130MEDIUMIn face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in EPSS 0.1%CVE-2024-45559MEDIUMBuffer Over-read in Automotive OS PlatformEPSS 0.1%CVE-2026-101310HIGHMultiple vulnerabilities in bhyve device modelsEPSS 0.1%CVE-2025-11961LOWOOBR and OOBW in pcap_ether_aton() in libpcapEPSS 0.1%CVE-2022-42757LOWIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42758LOWIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2018-5852HIGHBuffer Over-read in IPAEPSS 0.1%CVE-2023-43527MEDIUMBuffer Over-read in VideoEPSS 0.1%CVE-2023-28541HIGHBuffer Over-read in WLAN HostEPSS 0.1%CVE-2025-47395MEDIUMBuffer Over-read in WLAN FirmwareEPSS 0.1%CVE-2023-28542HIGHBuffer Over-read in WLAN HOSTEPSS 0.1%CVE-2026-21374HIGHBuffer Over-read in CameraEPSS 0.1%CVE-2022-40524MEDIUMBuffer over-read in ModemEPSS 0.1%