Fallos del tipo CWE-126

527 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2025-27068HIGHBuffer Over-read in CameraEPSS 0.1%CVE-2022-38673MEDIUMIn face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in EPSS 0.1%CVE-2025-47317HIGHBuffer Over-read in BT ControllerEPSS 0.1%CVE-2024-45548HIGHBuffer Over-read in WLAN Windows HostEPSS 0.1%CVE-2024-45546HIGHBuffer Over-read in WLAN Windows HostEPSS 0.1%CVE-2025-21457MEDIUMBuffer Over-read in Automotive OS Platform AndroidEPSS 0.1%CVE-2022-44445MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2025-27033MEDIUMBuffer Over-read in VideoEPSS 0.1%CVE-2025-27030MEDIUMBuffer Over-read in AudioEPSS 0.1%CVE-2022-44443MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2025-27036MEDIUMBuffer Over-read in VideoEPSS 0.1%CVE-2022-44446MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2025-47368HIGHBuffer Over-read in DSP ServiceEPSS 0.1%CVE-2025-47362MEDIUMBuffer Over-read in Automotive Software platform based on QNXEPSS 0.1%CVE-2025-27064MEDIUMBuffer Over-read in Core ServicesEPSS 0.1%CVE-2026-21373HIGHBuffer Over-read in CameraEPSS 0.1%CVE-2025-27049MEDIUMBuffer Over-read in CameraEPSS 0.1%CVE-2025-27041MEDIUMBuffer Over-read in VideoEPSS 0.1%CVE-2025-47331MEDIUMBuffer Over-read in VideoEPSS 0.1%CVE-2026-21378HIGHBuffer Over-read in CameraEPSS 0.1%