Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-2704HIGHTenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflowEPSS 1.5%CVE-2024-2763HIGHTenda AC10U setcfm formSetCfm stack-based overflowEPSS 1.5%CVE-2024-2811HIGHTenda AC15 WifiWpsStart formWifiWpsStart stack-based overflowEPSS 1.5%CVE-2018-6339—When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An offEPSS 1.5%CVE-2023-34095CRITICALcpdb-libs vulnerable to buffer overflows via scanfEPSS 1.5%CVE-2023-50186HIGHGStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.5%CVE-2024-2488HIGHTenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflowEPSS 1.5%CVE-2020-27221—In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natEPSS 1.5%CVE-2020-16209CRITICALFieldcomm Group HART-IP and hipserver - Stack-based Buffer OverflowEPSS 1.5%CVE-2021-34978HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouEPSS 1.5%CVE-2017-15101HIGHA missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could caEPSS 1.5%CVE-2025-3710CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2025-3711CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2025-3714CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2013-2597HIGHStack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used EPSS 1.5%KEVCVE-2023-25081HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25124HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2022-2471CRITICALStack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection componentEPSS 1.5%CVE-2023-7220CRITICALTotolink NR1800X cstecgi.cgi loginAuth stack-based overflowEPSS 1.5%CVE-2022-0408HIGHStack-based Buffer Overflow in vim/vimEPSS 1.5%