Falhas do tipo CWE-126

526 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2025-59609MEDIUMBuffer Over-read in WLAN Host CommunicationEPSS 0.1%CVE-2025-27068HIGHBuffer Over-read in CameraEPSS 0.1%CVE-2025-27055HIGHBuffer Over-read in CameraEPSS 0.1%CVE-2022-38673MEDIUMIn face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in EPSS 0.1%CVE-2025-47317HIGHBuffer Over-read in BT ControllerEPSS 0.1%CVE-2024-45548HIGHBuffer Over-read in WLAN Windows HostEPSS 0.1%CVE-2024-45546HIGHBuffer Over-read in WLAN Windows HostEPSS 0.1%CVE-2025-21457MEDIUMBuffer Over-read in Automotive OS Platform AndroidEPSS 0.1%CVE-2022-44446MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2025-27033MEDIUMBuffer Over-read in VideoEPSS 0.1%CVE-2022-44445MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2025-27030MEDIUMBuffer Over-read in AudioEPSS 0.1%CVE-2025-27036MEDIUMBuffer Over-read in VideoEPSS 0.1%CVE-2022-44443MEDIUMIn wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2025-47368HIGHBuffer Over-read in DSP ServiceEPSS 0.1%CVE-2025-27064MEDIUMBuffer Over-read in Core ServicesEPSS 0.1%CVE-2025-47362MEDIUMBuffer Over-read in Automotive Software platform based on QNXEPSS 0.1%CVE-2025-27049MEDIUMBuffer Over-read in CameraEPSS 0.1%CVE-2026-21373HIGHBuffer Over-read in CameraEPSS 0.1%CVE-2025-47331MEDIUMBuffer Over-read in VideoEPSS 0.1%