Fallos del tipo CWE-121

3839 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2025-57085CRITICALTenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability EPSS 0.5%CVE-2025-25741MEDIUMD-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6_PppoePassword parameter in thEPSS 0.5%CVE-2023-42069HIGHPDF-XChange Editor PDF File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-32288MEDIUMTenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter fuEPSS 0.5%CVE-2026-86514MEDIUMvgmstream txth-txtp txth.c sscanf stack-based overflowEPSS 0.5%CVE-2014-0774—Schneider Electric OFS Stack Buffer OverflowEPSS 0.5%CVE-2024-46546HIGHNEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. This vulnerabEPSS 0.5%CVE-2026-68816HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-68795HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-55899HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-63527HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-81396HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-11528HIGHTenda AC18 Web Management getRebootStatus sub_45304 stack-based overflowEPSS 0.5%CVE-2025-67187CRITICALA stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules EPSS 0.5%CVE-2026-11503HIGHTenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowEPSS 0.5%CVE-2026-25968HIGHImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.EPSS 0.5%CVE-2026-81953HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-11522HIGHTenda W20E setPortMirror formSetPortMirror stack-based overflowEPSS 0.5%CVE-2026-81388HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-64907HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.5%