Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2018-5476—A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. StackEPSS 1.7%CVE-2022-36063HIGHUSBX Host CDC ECM integer underflow with buffer overflowEPSS 1.7%CVE-2022-32454CRITICALA stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.EPSS 1.7%CVE-2024-4119HIGHTenda W15E delIpMacBind formIPMacBindDel stack-based overflowEPSS 1.7%CVE-2024-4117HIGHTenda W15E DelPortMapping formDelPortMapping stack-based overflowEPSS 1.7%CVE-2024-4123HIGHTenda W15E SetPortMapping formSetPortMapping stack-based overflowEPSS 1.7%CVE-2024-4120HIGHTenda W15E modifyIpMacBind formIPMacBindModify stack-based overflowEPSS 1.7%CVE-2024-4118HIGHTenda W15E addIpMacBind formIPMacBindAdd stack-based overflowEPSS 1.7%CVE-2024-4121HIGHTenda W15E formQOSRuleDel stack-based overflowEPSS 1.7%CVE-2024-2485HIGHTenda AC18 SetSpeedWan formSetSpeedWan stack-based overflowEPSS 1.7%CVE-2024-4115HIGHTenda W15E AddDnsForward formAddDnsForward stack-based overflowEPSS 1.7%CVE-2024-2892HIGHTenda AC7 setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-4124HIGHTenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflowEPSS 1.7%CVE-2024-2893HIGHTenda AC7 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.7%CVE-2024-4116HIGHTenda W15E DelDhcpRule formDelDhcpRule stack-based overflowEPSS 1.7%CVE-2024-4122HIGHTenda W15E setDebugCfg formSetDebugCfg stack-based overflowEPSS 1.7%CVE-2024-4170HIGHTenda 4G300 sub_429A30 stack-based overflowEPSS 1.7%CVE-2024-3878HIGHTenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.7%CVE-2024-3876HIGHTenda F1202 VirtualSer fromVirtualSer stack-based overflowEPSS 1.7%CVE-2024-3008HIGHTenda FH1205 execCommand formexeCommand stack-based overflowEPSS 1.7%