Fallos del tipo CWE-121

3842 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2025-28033HIGHTOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000REPSS 0.4%CVE-2024-25746HIGHStack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute aEPSS 0.4%CVE-2025-28026HIGHTOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 werEPSS 0.4%CVE-2024-53621HIGHA buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allows attackers to causeEPSS 0.4%CVE-2023-34302HIGHAshlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35710HIGHAshlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-28550MEDIUMTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function.EPSS 0.4%CVE-2025-57215HIGHTenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.EPSS 0.4%CVE-2023-50809HIGHIn certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly validate an informatEPSS 0.4%CVE-2023-0770HIGHStack-based Buffer Overflow in gpac/gpacEPSS 0.4%CVE-2024-32315MEDIUMTenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.EPSS 0.4%CVE-2023-51367MEDIUMQTS, QuTS heroEPSS 0.4%CVE-2026-3439MEDIUMA post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewallEPSS 0.4%CVE-2025-70304HIGHA buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafEPSS 0.4%CVE-2023-50235HIGHHancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-53296LOWDell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high prEPSS 0.4%CVE-2026-18303HIGHGIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-5827HIGHAutel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2019-25363HIGHWMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of ServiceEPSS 0.4%CVE-2023-2837MEDIUMStack-based Buffer Overflow in gpac/gpacEPSS 0.4%