Falhas do tipo CWE-126

527 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2026-50372HIGHWindows Redirected Drive Buffering System Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2024-23359HIGHBuffer Over-read in Multi Mode Call ProcessorEPSS 0.3%CVE-2024-23358HIGHBuffer Over-read in Multi Mode Call ProcessorEPSS 0.3%CVE-2025-63602HIGHA vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) aEPSS 0.3%CVE-2024-21467MEDIUMBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2026-84640HIGHOne byte overflow read in mail parserEPSS 0.3%CVE-2024-23363HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2024-21459MEDIUMBuffer Over-read in WLAN HOSTEPSS 0.3%CVE-2023-4758MEDIUMBuffer Over-read in gpac/gpacEPSS 0.3%CVE-2024-45552HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%CVE-2026-40210MEDIUMOut-of-bounds read in SetMacAddrActionEPSS 0.3%CVE-2025-21484HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%CVE-2025-21487HIGHBuffer Over-read in Data Network Stack & ConnectivityEPSS 0.3%CVE-2025-21434HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2025-21430HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2025-21429HIGHBuffer Over-read in WLAN HostEPSS 0.3%CVE-2025-21435HIGHBuffer Over-read in WLAN Host CommunicationEPSS 0.3%CVE-2025-21448HIGHBuffer Over-read in WLAN FirmwareEPSS 0.3%CVE-2024-9843MEDIUMA buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.EPSS 0.3%CVE-2024-38405HIGHBuffer Over-read in WLAN HostEPSS 0.3%