Fallos del tipo CWE-126

580 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2024-26176HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-47295LOWA buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allEPSS 0.8%CVE-2023-39541MEDIUMA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially craEPSS 0.8%CVE-2023-39540MEDIUMA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially craEPSS 0.8%CVE-2026-88195MEDIUMMicrosoft Office Excel Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-55970MEDIUMApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()EPSS 0.8%CVE-2025-36855HIGHEOL .NET 6.0 Runtime Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-49031HIGHMicrosoft Office Graphics Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-5260HIGHGnutls: gnutls: information disclosure via heap overread in rsa key exchangeEPSS 0.8%CVE-2025-4207MEDIUMPostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationEPSS 0.8%CVE-2024-26255MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2024-28902MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2024-21340MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-44185HIGHApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`EPSS 0.7%CVE-2026-108454MEDIUMMicrosoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-40210MEDIUMOut-of-bounds read in SetMacAddrActionEPSS 0.7%CVE-2024-30039MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2022-1908LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.7%CVE-2022-1907LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.7%CVE-2026-107928HIGHinfo leak uploading over WebSockets with GnuTLSEPSS 0.7%