Fallos del tipo CWE-121

3820 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-39605HIGHDelta Electronics DIAScreen Stack-based Buffer OverflowEPSS 2.9%CVE-2020-7007—In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go outEPSS 2.9%CVE-2021-1337HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2022-42339HIGHAdobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code ExecutionEPSS 2.9%CVE-2025-5228HIGHD-Link DI-8100 jhttpd login.cgi httpd_get_parm stack-based overflowEPSS 2.9%CVE-2021-21889CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). EPSS 2.8%CVE-2020-28384—A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). AffectedEPSS 2.8%CVE-2020-26989—A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (AEPSS 2.8%CVE-2021-33546HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCEEPSS 2.8%CVE-2021-33545HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCEEPSS 2.8%CVE-2021-33547HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCEEPSS 2.8%CVE-2025-10925HIGHGIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 2.8%CVE-2020-7845HIGHJiransecurity Spamsniper Stack-based Buffer Overflow VulnerabilityEPSS 2.8%CVE-2019-18236—Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a sEPSS 2.8%CVE-2021-32976CRITICALMoxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer OverflowEPSS 2.8%CVE-2025-6121CRITICALD-Link DIR-632 HTTP POST Request get_pure_content stack-based overflowEPSS 2.8%CVE-2018-7494—WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be readEPSS 2.8%CVE-2017-13999—A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vuEPSS 2.8%CVE-2010-3872HIGHHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.cEPSS 2.8%CVE-2019-18257—In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfeEPSS 2.8%