Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2023-49912HIGHA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO GiEPSS 1.8%CVE-2021-31507HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User inEPSS 1.8%CVE-2024-29045HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2021-46154—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2021-46155—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2021-46158—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2024-3010HIGHTenda FH1205 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-3905HIGHTenda AC500 execCommand R7WebsSecurityHandler stack-based overflowEPSS 1.8%CVE-2024-2978HIGHTenda F1203 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-2977HIGHTenda F1203 QuickIndex formQuickIndex stack-based overflowEPSS 1.8%CVE-2024-2980HIGHTenda FH1202 execCommand formexeCommand stack-based overflowEPSS 1.8%CVE-2024-2981HIGHTenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowEPSS 1.8%CVE-2024-3877HIGHTenda F1202 fromqossetting stack-based overflowEPSS 1.8%CVE-2024-4167HIGHTenda 4G300 sub_422AA4 stack-based overflowEPSS 1.8%CVE-2017-7910—A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be ableEPSS 1.8%CVE-2017-16751—A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or priEPSS 1.8%CVE-2024-0532HIGHTenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflowEPSS 1.8%CVE-2024-4126HIGHTenda W15E SetSysTimeCfg formSetSysTime stack-based overflowEPSS 1.8%CVE-2024-4066HIGHTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowEPSS 1.8%CVE-2024-4127HIGHTenda W15E guestWifiRuleRefresh stack-based overflowEPSS 1.8%