Fallos del tipo CWE-121

3562 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2025-22457CRITICALA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTAEPSS 100.0%KEVCVE-2025-0282CRITICALA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti NeuEPSS 100.0%KEVCVE-2021-20038CRITICALA Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticEPSS 99.9%KEVCVE-2009-0927HIGHStack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to eEPSS 96.6%KEVCVE-2020-10924HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rEPSS 87.3%CVE-2022-20705CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 80.0%CVE-2016-6563—D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login actionEPSS 79.9%CVE-2017-13089HIGHGNU Wget: stack overflow in HTTP protocol handlingEPSS 79.9%CVE-2026-41089CRITICALWindows Netlogon Remote Code Execution VulnerabilityEPSS 79.6%CVE-2008-0015HIGHStack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequesEPSS 76.7%KEVCVE-2022-20707CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 75.3%CVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2022-35690CRITICALAdobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 72.2%CVE-2018-10594—Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, EEPSS 69.0%CVE-2014-0783—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 68.4%CVE-2018-1161—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. AuthentEPSS 66.7%CVE-2021-33549HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCEEPSS 66.2%CVE-2014-2364—Advantech WebAccess Stack-Based Buffer OverflowEPSS 61.4%CVE-2023-31419MEDIUMElasticsearch StackOverflow vulnerabilityEPSS 60.7%CVE-2022-22274—A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of ServEPSS 57.3%