Fallos del tipo CWE-126

526 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2025-53806MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-53796MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-53798MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2025-53797MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.2%CVE-2021-34584CRITICALCODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)EPSS 1.1%CVE-2022-20823HIGHCisco NX-OS Software OSPFv3 Denial of Service VulnerabilityEPSS 1.1%CVE-2023-23571HIGHAn access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request caEPSS 1.1%CVE-2025-62473MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.1%CVE-2023-51773CRITICALBACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.EPSS 1.1%CVE-2026-72932HIGHWindows Message Queuing Queue Manager Information Disclosure VulnerabilityEPSS 1.0%CVE-2025-24992MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 1.0%CVE-2024-49088HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2025-29956MEDIUMWindows SMB Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-24028MEDIUMOut-of-bounds read when parsing DNS packets via LuaEPSS 1.0%CVE-2022-32141MEDIUMCODESYS runtime system prone to denial of service due to buffer over readEPSS 1.0%CVE-2022-23130MEDIUMBuffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and pEPSS 1.0%CVE-2026-50468MEDIUMMicrosoft SQL Server Information Disclosure VulnerabilityEPSS 1.0%CVE-2023-36803MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-25646HIGHLIBPNG has a heap buffer overflow in png_set_quantizeEPSS 1.0%CVE-2024-43595MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%