Fallos del tipo CWE-121

3825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-4247HIGHTenda i21 formQosManage_auto stack-based overflowEPSS 1.5%CVE-2024-4492HIGHTenda i21 setStaOffline formOfflineSet stack-based overflowEPSS 1.5%CVE-2024-4491HIGHTenda i21 formGetDiagnoseInfo stack-based overflowEPSS 1.5%CVE-2024-4113HIGHTenda TX9 SetSysTimeCfg sub_42D4DC stack-based overflowEPSS 1.5%CVE-2024-4497HIGHTenda i21 formexeCommand stack-based overflowEPSS 1.5%CVE-2024-4496HIGHTenda i21 formWifiMacFilterSet stack-based overflowEPSS 1.5%CVE-2024-4493HIGHTenda i21 formSetAutoPing stack-based overflowEPSS 1.5%CVE-2024-4239HIGHTenda AX1806 SetRebootTimer formSetRebootTimer stack-based overflowEPSS 1.5%CVE-2024-4237HIGHTenda AX1806 execCommand R7WebsSecurityHandler stack-based overflowEPSS 1.5%CVE-2024-4238HIGHTenda AX1806 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.5%CVE-2024-26180HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.5%CVE-2024-3879HIGHTenda W30E setcfm formSetCfm stack-based overflowEPSS 1.5%CVE-2024-4240HIGHTenda W9 formQosManageDouble_user stack-based overflowEPSS 1.5%CVE-2021-27396—A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validEPSS 1.5%CVE-2021-27398—A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validEPSS 1.5%CVE-2024-3882HIGHTenda W30E fromRouteStatic stack-based overflowEPSS 1.4%CVE-2022-28772—By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.EPSS 1.4%CVE-2019-13518—An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor VEPSS 1.4%CVE-2022-27646HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9EPSS 1.4%CVE-2019-13540—Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing speEPSS 1.4%