Falhas do tipo CWE-126

527 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2024-33048HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-23364HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2024-33050HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2024-53026HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%CVE-2024-49839HIGHBuffer Over-read in WLAN Host CmnEPSS 0.3%CVE-2025-59192HIGHStorport.sys Driver Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-66038LOWOpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointersEPSS 0.3%CVE-2024-33019HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33020HIGHBuffer Over-read in WLAN HOSTEPSS 0.3%CVE-2024-33026HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33015HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33013HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33011HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-33025HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2026-41898HIGHrust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peerEPSS 0.3%CVE-2024-33012HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2024-49846HIGHBuffer Over-read in Multi-Mode Call ProcessorEPSS 0.3%CVE-2024-21456MEDIUMBuffer Over-read in WLAN HOSTEPSS 0.3%CVE-2026-47088LOWAn issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticatedEPSS 0.3%CVE-2025-21488HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%