Falhas do tipo CWE-126

580 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2023-33098HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2026-53587HIGHlibgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_dataEPSS 0.5%CVE-2024-3077MEDIUMBluetooth: integer underflow in gatt_find_info_rspEPSS 0.5%CVE-2026-61350MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-55606MEDIUModhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()EPSS 0.5%CVE-2026-55036HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-64905HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-83565MEDIUMWindows Encrypting File System (EFS) Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-70041MEDIUMWindows CD-ROM Driver Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-69954MEDIUMWindows Overlay Filter Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-32704HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-112404HIGHPillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsEPSS 0.4%CVE-2026-85910MEDIUMWindows StateRepository API Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-103567MEDIUMWindows Broadcast DVR User Service Information Disclosure VulnerabilityEPSS 0.4%CVE-2025-49659HIGHWindows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-33048HIGHBuffer over-read in WLAN FirmwareEPSS 0.4%CVE-2023-33047HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2023-33061HIGHBuffer Over-read in WLAN FirmwareEPSS 0.4%CVE-2022-3178HIGHBuffer Over-read in gpac/gpacEPSS 0.4%CVE-2025-60720HIGHWindows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege VulnerabilityEPSS 0.4%