Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-2487HIGHTenda AC18 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.6%CVE-2024-4065HIGHTenda AC8 SetRebootTimer formSetRebootTimer stack-based overflowEPSS 1.6%CVE-2022-23804HIGHA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of EPSS 1.6%CVE-2022-23803HIGHA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of EPSS 1.6%CVE-2024-3875HIGHTenda F1202 Natlimit fromNatlimit stack-based overflowEPSS 1.6%CVE-2018-14800—Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boEPSS 1.6%CVE-2025-34127CRITICALAchat v0.150 SEH Buffer Overflow via UDPEPSS 1.6%CVE-2024-28928HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-5293HIGHD-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-2805HIGHTenda AC15 SetSpeedWan formSetSpeedWan stack-based overflowEPSS 1.6%CVE-2026-4529HIGHD-Link DHP-1320 SOAP redirect_count_down_page stack-based overflowEPSS 1.6%CVE-2025-1539HIGHD-Link DAP-1320 storagein.pd-XXXXXX replace_special_char stack-based overflowEPSS 1.6%CVE-2018-5410—Dokan file system driver contains a stack-based buffer overflowEPSS 1.6%CVE-2024-45695CRITICALD-Link WiFi router - Stack-based Buffer OverflowEPSS 1.6%CVE-2024-3007HIGHTenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.6%CVE-2024-2894HIGHTenda AC7 SetNetControlList formSetQosBand stack-based overflowEPSS 1.6%CVE-2024-2987HIGHTenda FH1202 GetParentControlInfo stack-based overflowEPSS 1.6%CVE-2020-26993—A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applicatiEPSS 1.6%CVE-2020-26992—A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applicatiEPSS 1.6%CVE-2025-10432CRITICALTenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflowEPSS 1.6%