Fallos del tipo CWE-121

3820 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2022-20825CRITICALCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilityEPSS 3.2%CVE-2026-10179HIGHTRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflowEPSS 3.2%CVE-2022-26002CRITICALA stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-cEPSS 3.2%CVE-2017-12706—A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiEPSS 3.2%CVE-2018-17911—LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution.EPSS 3.2%CVE-2023-42116HIGHExim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 3.2%CVE-2018-14807—A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow reEPSS 3.1%CVE-2018-5440—A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based COEPSS 3.1%CVE-2025-7795HIGHTenda FH451 P2pListFilter fromP2pListFilter stack-based overflowEPSS 3.1%CVE-2023-35744HIGHD-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 3.1%CVE-2018-10839MEDIUMQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflowEPSS 3.1%CVE-2022-20712CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 3.0%CVE-2020-25159—Real Time Automation EtherNet/IPEPSS 3.0%CVE-2012-10060CRITICALSysax Multi Server < 5.55 SSH Username Buffer OverflowEPSS 3.0%CVE-2021-21891CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (iEPSS 3.0%CVE-2021-21890CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (iEPSS 3.0%CVE-2021-21887CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (EPSS 3.0%CVE-2019-13520—Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafEPSS 2.9%CVE-2020-2501—Stack Buffer Overflow in Surveillance StationEPSS 2.9%CVE-2019-14897MEDIUMA stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to causEPSS 2.9%