Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-4066HIGHTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowEPSS 1.8%CVE-2024-4126HIGHTenda W15E SetSysTimeCfg formSetSysTime stack-based overflowEPSS 1.8%CVE-2024-4168HIGHTenda 4G300 sub_4260F0 stack-based overflowEPSS 1.8%CVE-2024-4169HIGHTenda 4G300 sub_4279CC stack-based overflowEPSS 1.8%CVE-2024-2902HIGHTenda AC7 WifiGuestSet fromSetWifiGusetBasic stack-based overflowEPSS 1.8%CVE-2024-4166HIGHTenda 4G300 sub_41E858 stack-based overflowEPSS 1.8%CVE-2024-2984HIGHTenda FH1202 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-2985HIGHTenda FH1202 QuickIndex formQuickIndex stack-based overflowEPSS 1.8%CVE-2024-2983HIGHTenda FH1202 SetClientState formSetClientState stack-based overflowEPSS 1.8%CVE-2021-32947—FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to executEPSS 1.8%CVE-2018-17929—In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploEPSS 1.8%CVE-2018-18993—Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prioEPSS 1.8%CVE-2022-23946HIGHA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality of KiCad EDA 6EPSS 1.7%CVE-2024-2706HIGHTenda AC10U WifiWpsStart formWifiWpsStart stack-based overflowEPSS 1.7%CVE-2024-0533HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2012-10023MEDIUMFreeFloat FTP Server USER Command Buffer OverflowEPSS 1.7%CVE-2024-3910HIGHTenda AC500 DhcpListClient fromDhcpListClient stack-based overflowEPSS 1.7%CVE-2026-24881HIGHIn GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffeEPSS 1.7%CVE-2024-4112HIGHTenda TX9 SetVirtualServerCfg sub_42CB94 stack-based overflowEPSS 1.7%CVE-2022-25753—A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XEPSS 1.7%