Falhas do tipo CWE-126

526 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2023-21813HIGHWindows Secure Channel Denial of Service VulnerabilityEPSS 1.7%CVE-2023-21811HIGHWindows iSCSI Service Denial of Service VulnerabilityEPSS 1.7%CVE-2023-36801MEDIUMDHCP Server Service Information Disclosure VulnerabilityEPSS 1.6%CVE-2025-21203MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.6%CVE-2023-33169MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33167MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33166MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33173MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33168MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2023-33172MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 1.6%CVE-2024-38127HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 1.6%CVE-2025-26676MEDIUMWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityEPSS 1.6%CVE-2023-24901HIGHWindows NFS Portmapper Information Disclosure VulnerabilityEPSS 1.6%CVE-2019-5432—A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.EPSS 1.6%CVE-2022-2124HIGHBuffer Over-read in vim/vimEPSS 1.6%CVE-2021-1373HIGHCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityEPSS 1.5%CVE-2022-20714HIGHCisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service VulnerabilityEPSS 1.5%CVE-2023-24857MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2022-22519HIGHSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.EPSS 1.5%CVE-2023-24883MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%