Fallos del tipo CWE-121

3848 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-53311MEDIUMA Stack buffer overflow in the arguments parameter in Immunity Inc. Immunity Debugger v1.85 allows attackers to execute arbitrary code via aEPSS 0.3%CVE-2025-7623MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.3%CVE-2024-11802HIGHFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-36773MEDIUMShenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the Go parameter ofEPSS 0.3%CVE-2024-11789HIGHFuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11787HIGHFuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11800HIGHFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11791HIGHFuji Electric Monitouch V-SFT V8C File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-36772MEDIUMShenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameEPSS 0.3%CVE-2024-11792HIGHFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11799HIGHFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11795HIGHFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-19774HIGHBlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-34451MEDIUMrofl0r/proxychains-ng <= 4.17 Stack-based Buffer OverflowEPSS 0.3%CVE-2025-49528HIGHIllustrator | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2025-49527HIGHIllustrator | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-32707MEDIUMPX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loopEPSS 0.3%CVE-2025-45587HIGHA stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via aEPSS 0.3%CVE-2024-44387MEDIUMTenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.EPSS 0.3%CVE-2026-32195HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.3%