Fallos del tipo CWE-121

3845 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2025-29364MEDIUMspimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READ_SYSCALL and WRITE_SYSCALL system calls. The application vEPSS 0.4%CVE-2024-45413HIGHThe HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function. This function is an API wrEPSS 0.4%CVE-2024-40897HIGHStack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a speciEPSS 0.4%CVE-2025-30265LOWQTS, QuTS heroEPSS 0.4%CVE-2026-22316MEDIUMBuffer Overflow using TFTP FilenameEPSS 0.4%CVE-2024-44549MEDIUMTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.EPSS 0.4%CVE-2024-44556MEDIUMTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.EPSS 0.4%CVE-2025-66865HIGHAn issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service EPSS 0.4%CVE-2026-10534HIGHIBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parserEPSS 0.4%CVE-2020-37124HIGHB64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter)EPSS 0.4%CVE-2025-4077MEDIUMcode-projects School Billing System searchrec stack-based overflowEPSS 0.4%CVE-2026-75118HIGHhttp_gdpr_decrypt Pre-Authentication Stack-Based Buffer OverflowEPSS 0.4%CVE-2025-4059MEDIUMcode-projects Prison Management System Prison_Mgmt_Sys addrecord stack-based overflowEPSS 0.4%CVE-2025-4068MEDIUMcode-projects Simple Movie Ticket Booking System changeprize stack-based overflowEPSS 0.4%CVE-2025-4069MEDIUMcode-projects Product Management System add_item stack-based overflowEPSS 0.4%CVE-2025-21163HIGHIllustrator | Stack-based Buffer Overflow (CWE-121)EPSS 0.4%CVE-2023-1646MEDIUMIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflowEPSS 0.4%CVE-2025-3166MEDIUMcode-projects Product Management System Search Product Menu search_item stack-based overflowEPSS 0.4%CVE-2025-60550HIGHD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone.EPSS 0.4%CVE-2025-60547HIGHD-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard7.EPSS 0.4%