Fallos del tipo CWE-126

526 resultados

Leitura excessiva de buffer na pilha

Ocorre quando o código lê mais dados de um buffer alocado na pilha do que o tamanho dele permite. O atacante consegue expor dados sensíveis que estão em posições de memória adjacentes (senhas, tokens, dados de outros processos) ou causar crash da aplicação.

Ejemplo

Uma função recebe uma string de 64 bytes na pilha, mas usa strcpy() ou memcpy() sem validar o tamanho real, lendo 128 bytes. Os 64 bytes extras vêm de outras variáveis locais ou frames de função anteriores, expondo informações confidenciais.

Cómo mitigar

Use funções seguras com limite explícito de bytes (strncpy, snprintf, memcpy com tamanho validado) ou linguagens com bounds-checking automático. Valide sempre o tamanho de entrada contra o buffer antes de ler, e use ferramentas estáticas (ASan, Clang Static Analyzer) durante desenvolvimento.

CVE-2025-32053MEDIUMLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()EPSS 0.6%CVE-2025-32052MEDIUMLibsoup: heap buffer overflow in sniff_unknown()EPSS 0.6%CVE-2024-43500MEDIUMWindows Resilient File System (ReFS) Information Disclosure VulnerabilityEPSS 0.6%CVE-2023-21820HIGHWindows Distributed File System (DFS) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-42333LOWHeap buffer over-readEPSS 0.6%CVE-2024-38373CRITICALFreeRTOS-Plus-TCP Buffer Over-Read in DNS Response ParserEPSS 0.6%CVE-2023-6936MEDIUM Heap-buffer over-read with WOLFSSL_CALLBACKSEPSS 0.6%CVE-2024-30071MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.6%CVE-2023-36904HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-66312MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-30069MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-69416MEDIUMWindows DHCP Server Denial of Service VulnerabilityEPSS 0.6%CVE-2025-12106CRITICALInsufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IPEPSS 0.6%CVE-2025-21271HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-63091HIGHProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record ParserEPSS 0.5%CVE-2025-62560HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-32085MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-35324MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-31081HIGHXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceEPSS 0.5%CVE-2025-55325MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.5%