Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2018-5476—A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. StackEPSS 1.7%CVE-2022-36063HIGHUSBX Host CDC ECM integer underflow with buffer overflowEPSS 1.7%CVE-2022-32454CRITICALA stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.EPSS 1.7%CVE-2024-4119HIGHTenda W15E delIpMacBind formIPMacBindDel stack-based overflowEPSS 1.7%CVE-2024-4117HIGHTenda W15E DelPortMapping formDelPortMapping stack-based overflowEPSS 1.7%CVE-2024-4123HIGHTenda W15E SetPortMapping formSetPortMapping stack-based overflowEPSS 1.7%CVE-2024-4120HIGHTenda W15E modifyIpMacBind formIPMacBindModify stack-based overflowEPSS 1.7%CVE-2024-4118HIGHTenda W15E addIpMacBind formIPMacBindAdd stack-based overflowEPSS 1.7%CVE-2024-4121HIGHTenda W15E formQOSRuleDel stack-based overflowEPSS 1.7%CVE-2024-4122HIGHTenda W15E setDebugCfg formSetDebugCfg stack-based overflowEPSS 1.7%CVE-2024-2485HIGHTenda AC18 SetSpeedWan formSetSpeedWan stack-based overflowEPSS 1.7%CVE-2024-4115HIGHTenda W15E AddDnsForward formAddDnsForward stack-based overflowEPSS 1.7%CVE-2024-2892HIGHTenda AC7 setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-4124HIGHTenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflowEPSS 1.7%CVE-2024-2893HIGHTenda AC7 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.7%CVE-2024-4116HIGHTenda W15E DelDhcpRule formDelDhcpRule stack-based overflowEPSS 1.7%CVE-2024-4170HIGHTenda 4G300 sub_429A30 stack-based overflowEPSS 1.7%CVE-2024-3878HIGHTenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.7%CVE-2024-3876HIGHTenda F1202 VirtualSer fromVirtualSer stack-based overflowEPSS 1.7%CVE-2024-3008HIGHTenda FH1205 execCommand formexeCommand stack-based overflowEPSS 1.7%