Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-4066HIGHTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowEPSS 1.8%CVE-2024-4126HIGHTenda W15E SetSysTimeCfg formSetSysTime stack-based overflowEPSS 1.8%CVE-2024-4168HIGHTenda 4G300 sub_4260F0 stack-based overflowEPSS 1.8%CVE-2024-4169HIGHTenda 4G300 sub_4279CC stack-based overflowEPSS 1.8%CVE-2024-2902HIGHTenda AC7 WifiGuestSet fromSetWifiGusetBasic stack-based overflowEPSS 1.8%CVE-2024-2985HIGHTenda FH1202 QuickIndex formQuickIndex stack-based overflowEPSS 1.8%CVE-2024-4166HIGHTenda 4G300 sub_41E858 stack-based overflowEPSS 1.8%CVE-2024-2984HIGHTenda FH1202 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-2983HIGHTenda FH1202 SetClientState formSetClientState stack-based overflowEPSS 1.8%CVE-2021-32947—FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to executEPSS 1.8%CVE-2018-17929—In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploEPSS 1.8%CVE-2018-18993—Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prioEPSS 1.8%CVE-2022-23946HIGHA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality of KiCad EDA 6EPSS 1.7%CVE-2024-2706HIGHTenda AC10U WifiWpsStart formWifiWpsStart stack-based overflowEPSS 1.7%CVE-2024-0533HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2012-10023MEDIUMFreeFloat FTP Server USER Command Buffer OverflowEPSS 1.7%CVE-2024-3910HIGHTenda AC500 DhcpListClient fromDhcpListClient stack-based overflowEPSS 1.7%CVE-2026-24881HIGHIn GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffeEPSS 1.7%CVE-2024-4112HIGHTenda TX9 SetVirtualServerCfg sub_42CB94 stack-based overflowEPSS 1.7%CVE-2022-25753—A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XEPSS 1.7%