Fallos del tipo CWE-121

3825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2023-25101HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25094HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25116HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25090HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25083HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25084HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25119HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2024-4164HIGHTenda G3 ModifyPppAuthWhiteMac formModifyPppAuthWhiteMac stack-based overflowEPSS 1.5%CVE-2024-3881HIGHTenda W30E frmL7ProtForm frmL7PlotForm stack-based overflowEPSS 1.5%CVE-2025-35003CRITICALApache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.EPSS 1.5%CVE-2024-4165HIGHTenda G3 modifyDhcpRule stack-based overflowEPSS 1.5%CVE-2026-5614HIGHBelkin F9K1015 formSetPassword stack-based overflowEPSS 1.5%CVE-2022-2970CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.5%CVE-2025-7084HIGHBelkin F9K1122 webs formWpsStart stack-based overflowEPSS 1.5%CVE-2021-46699—A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack based buffer overflEPSS 1.5%CVE-2024-4497HIGHTenda i21 formexeCommand stack-based overflowEPSS 1.5%CVE-2024-4252HIGHTenda i22 formSetUrlFilterRule stack-based overflowEPSS 1.5%CVE-2024-4111HIGHTenda TX9 SetLEDCfg sub_42BD7C stack-based overflowEPSS 1.5%CVE-2024-4491HIGHTenda i21 formGetDiagnoseInfo stack-based overflowEPSS 1.5%CVE-2024-4492HIGHTenda i21 setStaOffline formOfflineSet stack-based overflowEPSS 1.5%