Fallos del tipo CWE-121

3851 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2025-29988MEDIUMDell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentialEPSS 0.2%CVE-2026-71266HIGHtinyobjloader-c Stack Buffer Overflow in MTL Material File Line ParsingEPSS 0.2%CVE-2026-34542MEDIUMiccDEV: SBO in CIccCalculatorFunc::Apply()EPSS 0.2%CVE-2026-83962HIGHSubstance3D - Modeler | Stack-based Buffer Overflow (CWE-121)EPSS 0.2%CVE-2026-29628MEDIUMA stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of ServiceEPSS 0.2%CVE-2026-13573MEDIUMllvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflowEPSS 0.2%CVE-2026-4015MEDIUMGPAC TeXML File load_text.c txtin_process_texml stack-based overflowEPSS 0.2%CVE-2020-37001HIGHFrigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter)EPSS 0.2%CVE-2024-3100MEDIUMA potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privEPSS 0.2%CVE-2026-15167HIGHStack-based Buffer Overflow in WiresharkEPSS 0.2%CVE-2026-8258MEDIUMSquirrel sqstdstring.cpp validate_format stack-based overflowEPSS 0.2%CVE-2026-15419HIGHCP210x Driver Memory Corruption results in Arbitrary Code ExecutionEPSS 0.2%CVE-2024-37997HIGHA vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0EPSS 0.2%CVE-2020-36965HIGHdocPrint Pro 8.0 - 'Add URL' Buffer Overflow (SEH Egghunter)EPSS 0.2%CVE-2026-91090LOWGPAC base_scenegraph.c gf_node_activate_ex stack-based overflowEPSS 0.2%CVE-2026-17093HIGHPower System Buffer OverflowEPSS 0.2%CVE-2025-1253MEDIUMBuffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.EPSS 0.2%CVE-2026-17494HIGHPower System Buffer OverflowEPSS 0.2%CVE-2026-19234HIGHPower System Buffer OverflowEPSS 0.2%CVE-2025-12464MEDIUMQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeEPSS 0.2%