Fallos del tipo CWE-126

580 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2024-38250HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-24513MEDIUMOn affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options this may cause a recomputation of the TCP checksum ...EPSS 0.7%CVE-2023-36773HIGH3D Builder Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-38135HIGHWindows Resilient File System (ReFS) Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-28900MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2024-28901MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2025-32052MEDIUMLibsoup: heap buffer overflow in sniff_unknown()EPSS 0.7%CVE-2025-32053MEDIUMLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()EPSS 0.7%CVE-2022-2301MEDIUMBuffer Over-read in hpjansson/chafaEPSS 0.7%CVE-2024-30079HIGHWindows Remote Access Connection Manager Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-50485MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 0.7%CVE-2026-69474MEDIUMWindows Overlay Filter Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-69416MEDIUMWindows DHCP Server Denial of Service VulnerabilityEPSS 0.6%CVE-2025-54901MEDIUMMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.6%CVE-2023-21820HIGHWindows Distributed File System (DFS) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-42333LOWHeap buffer over-readEPSS 0.6%CVE-2024-43500MEDIUMWindows Resilient File System (ReFS) Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-88201MEDIUMMicrosoft Office Excel Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-41992MEDIUMGlobal Buffer Overflow in GNU gzipEPSS 0.6%CVE-2024-38373CRITICALFreeRTOS-Plus-TCP Buffer Over-Read in DNS Response ParserEPSS 0.6%