Falhas do tipo CWE-126

526 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2024-30039MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-67393MEDIUMMicrosoft SQL Server Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-5260HIGHGnutls: gnutls: information disclosure via heap overread in rsa key exchangeEPSS 0.7%CVE-2025-4207MEDIUMPostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationEPSS 0.7%CVE-2022-1908LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.7%CVE-2024-38250HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-1907LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.7%CVE-2026-68819MEDIUMWindows Network File System Denial of Service VulnerabilityEPSS 0.7%CVE-2023-36773HIGH3D Builder Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-24513MEDIUMOn affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options this may cause a recomputation of the TCP checksum ...EPSS 0.7%CVE-2024-38135HIGHWindows Resilient File System (ReFS) Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-28900MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2024-28901MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2022-2301MEDIUMBuffer Over-read in hpjansson/chafaEPSS 0.7%CVE-2024-30079HIGHWindows Remote Access Connection Manager Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-50485MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 0.7%CVE-2026-69474MEDIUMWindows Overlay Filter Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-65794MEDIUMWindows SMB Client Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-69550MEDIUMWindows App for Mac Information Disclosure VulnerabilityEPSS 0.7%CVE-2025-32052MEDIUMLibsoup: heap buffer overflow in sniff_unknown()EPSS 0.6%