Falhas do tipo CWE-126

580 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2024-26176HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-47295LOWA buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allEPSS 0.8%CVE-2023-39541MEDIUMA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially craEPSS 0.8%CVE-2023-39540MEDIUMA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially craEPSS 0.8%CVE-2026-88195MEDIUMMicrosoft Office Excel Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-55970MEDIUMApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()EPSS 0.8%CVE-2025-36855HIGHEOL .NET 6.0 Runtime Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-49031HIGHMicrosoft Office Graphics Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-5260HIGHGnutls: gnutls: information disclosure via heap overread in rsa key exchangeEPSS 0.8%CVE-2025-4207MEDIUMPostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationEPSS 0.8%CVE-2024-26255MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2024-28902MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2024-21340MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-44185HIGHApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`EPSS 0.7%CVE-2026-108454MEDIUMMicrosoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-40210MEDIUMOut-of-bounds read in SetMacAddrActionEPSS 0.7%CVE-2024-30039MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.7%CVE-2022-1908LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.7%CVE-2022-1907LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.7%CVE-2026-107928HIGHinfo leak uploading over WebSockets with GnuTLSEPSS 0.7%