Falhas do tipo CWE-126

526 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2024-31080HIGHXorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsEPSS 0.5%CVE-2025-24068MEDIUMWindows Storage Management Provider Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-9029HIGHFreeimage: heap buffer overflow in tiff_read_iptc_profileEPSS 0.5%CVE-2026-58013MEDIUMGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"EPSS 0.5%CVE-2026-78516MEDIUMWindows Storage Information Disclosure VulnerabilityEPSS 0.5%CVE-2025-53736MEDIUMMicrosoft Word Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-21697MEDIUMWindows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-58010MEDIUMGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()EPSS 0.5%CVE-2026-58012MEDIUMGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()EPSS 0.5%CVE-2026-55970MEDIUMApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()EPSS 0.5%CVE-2023-33098HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2023-33081HIGHBuffer over-read in WLAN FirmwareEPSS 0.5%CVE-2023-33097HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2026-53587HIGHlibgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_dataEPSS 0.5%CVE-2024-3077MEDIUMBluetooth: integer underflow in gatt_find_info_rspEPSS 0.5%CVE-2026-55036HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-47973HIGHMicrosoft Virtual Hard Disk Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-47971HIGHMicrosoft Virtual Hard Disk Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-52877HIGHAn issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before versioEPSS 0.5%CVE-2024-52878HIGHAn issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before versioEPSS 0.5%