Falhas do tipo CWE-126

527 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2026-27799MEDIUMImageMagick has a heap Buffer Over-read in its DJVU image format handlerEPSS 0.1%CVE-2022-38671—In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneEPSS 0.1%CVE-2022-42762MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42780MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42774MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-39130MEDIUMIn face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in EPSS 0.1%CVE-2022-42779MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42781MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42759MEDIUMIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-33221MEDIUMBuffer over-read in Trusted Execution EnvironmentEPSS 0.1%CVE-2022-33273HIGHBuffer over-read in Trusted Execution EnvironmentEPSS 0.1%CVE-2022-39132MEDIUMIn camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kerneEPSS 0.1%CVE-2026-90610MEDIUMGPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-readEPSS 0.1%CVE-2024-45559MEDIUMBuffer Over-read in Automotive OS PlatformEPSS 0.1%CVE-2022-42758LOWIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42757LOWIn wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2018-5852HIGHBuffer Over-read in IPAEPSS 0.1%CVE-2023-28541HIGHBuffer Over-read in WLAN HostEPSS 0.1%CVE-2023-28542HIGHBuffer Over-read in WLAN HOSTEPSS 0.1%CVE-2023-43527MEDIUMBuffer Over-read in VideoEPSS 0.1%