Falhas do tipo CWE-126

581 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2026-50341MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-50383MEDIUMWindows Print Spooler Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-62793MEDIUMWindows NTFS Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-28572MEDIUMBuffer Over-read in WLAN HOSTEPSS 0.4%CVE-2025-62464HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-62467HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-62461HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-62462HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2024-33064HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.4%CVE-2026-85835MEDIUMServicing Stack Updates Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-45843HIGHslip: bound decode() reads against the compressed packet lengthEPSS 0.4%CVE-2025-62787LOWWazuh Vulnerable to Heap-based Buffer Over-read in DecodeWinevtEPSS 0.4%CVE-2024-12011HIGHA CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure cEPSS 0.4%CVE-2022-42768MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.4%CVE-2026-53920HIGHodhcpd DHCPv6 Short IA_NA/IA_PD Body Stack DisclosureEPSS 0.4%CVE-2026-83719MEDIUMServicing Stack Updates Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-34059HIGHApache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()EPSS 0.4%CVE-2023-45919MEDIUMMesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situaEPSS 0.4%CVE-2026-96851MEDIUMWindows Management Instrumentation Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-96848MEDIUMWindows Win32 Kernel Subsystem Information Disclosure VulnerabilityEPSS 0.4%