Fallos del tipo CWE-121

3825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2019-13537—The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerabiEPSS 1.3%CVE-2017-20242CRITICALKeysight IxChariot Endpoint stack-based buffer overflowEPSS 1.3%CVE-2024-36435CRITICALAn issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules). An unautEPSS 1.3%CVE-2023-2262CRITICALRockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer OverflowEPSS 1.3%CVE-2022-40160—Stack Overflow in JXPathEPSS 1.3%CVE-2022-40159—Stack Overflow in JXPathEPSS 1.3%CVE-2026-4567CRITICALTenda A15 UploadCfg stack-based overflowEPSS 1.3%CVE-2025-63658HIGHA stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of SEPSS 1.3%CVE-2025-5619HIGHTenda CH22 addUserName formaddUserName stack-based overflowEPSS 1.3%CVE-2023-33222MEDIUMStack buffer overflow when reading DESFire cardEPSS 1.3%CVE-2024-7152HIGHTenda O3 setMacFilterList fromSafeSetMacFilter stack-based overflowEPSS 1.3%CVE-2025-34108HIGHDisk Pulse Enterprise 9.0.34 Login Stack Buffer OverflowEPSS 1.3%CVE-2020-15417MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 EPSS 1.3%CVE-2025-7910HIGHD-Link DIR-513 Boa Webserver formSetWanNonLogin sprintf stack-based overflowEPSS 1.3%CVE-2025-7909HIGHD-Link DIR-513 Boa Webserver formLanSetupRouterSettings sprintf stack-based overflowEPSS 1.3%CVE-2023-43238HIGHD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi.EPSS 1.3%CVE-2023-41251HIGHA stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craEPSS 1.3%CVE-2024-10698HIGHTenda AC6 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.3%CVE-2023-43242HIGHD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel.EPSS 1.3%CVE-2024-6249HIGHWyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.3%