Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2023-49912HIGHA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO GiEPSS 1.8%CVE-2021-31507HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User inEPSS 1.8%CVE-2024-29045HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2021-46154—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2021-46155—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2021-46158—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2024-3010HIGHTenda FH1205 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-3905HIGHTenda AC500 execCommand R7WebsSecurityHandler stack-based overflowEPSS 1.8%CVE-2024-2978HIGHTenda F1203 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-2977HIGHTenda F1203 QuickIndex formQuickIndex stack-based overflowEPSS 1.8%CVE-2024-2980HIGHTenda FH1202 execCommand formexeCommand stack-based overflowEPSS 1.8%CVE-2024-2981HIGHTenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowEPSS 1.8%CVE-2024-3877HIGHTenda F1202 fromqossetting stack-based overflowEPSS 1.8%CVE-2024-4167HIGHTenda 4G300 sub_422AA4 stack-based overflowEPSS 1.8%CVE-2017-7910—A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be ableEPSS 1.8%CVE-2017-16751—A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or priEPSS 1.8%CVE-2024-0532HIGHTenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflowEPSS 1.8%CVE-2024-4126HIGHTenda W15E SetSysTimeCfg formSetSysTime stack-based overflowEPSS 1.8%CVE-2024-4066HIGHTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowEPSS 1.8%CVE-2024-4127HIGHTenda W15E guestWifiRuleRefresh stack-based overflowEPSS 1.8%