Fallos del tipo CWE-126

526 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2023-21813HIGHWindows Secure Channel Denial of Service VulnerabilityEPSS 1.7%CVE-2023-21811HIGHWindows iSCSI Service Denial of Service VulnerabilityEPSS 1.7%CVE-2023-36801MEDIUMDHCP Server Service Information Disclosure VulnerabilityEPSS 1.6%CVE-2025-21203MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.6%CVE-2023-33169MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33167MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33166MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33173MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33168MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33172MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2024-38127HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 1.6%CVE-2025-26676MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.6%CVE-2023-24901HIGHWindows NFS Portmapper Information Disclosure VulnerabilityEPSS 1.6%CVE-2019-5432—A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.EPSS 1.6%CVE-2022-2124HIGHBuffer Over-read in vim/vimEPSS 1.6%CVE-2021-1373HIGHCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityEPSS 1.5%CVE-2022-20714HIGHCisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service VulnerabilityEPSS 1.5%CVE-2023-24857MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2022-22519HIGHSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.EPSS 1.5%CVE-2023-24883MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%