Fallos del tipo CWE-121

3825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-8226HIGHTenda O1 setcfm formSetCfm stack-based overflowEPSS 1.3%CVE-2025-4841HIGHD-Link DCS-932L gpio sub_404780 stack-based overflowEPSS 1.3%CVE-2025-4842HIGHD-Link DCS-932L ucp isUCPCameraNameChanged stack-based overflowEPSS 1.3%CVE-2025-4843HIGHD-Link DCS-932L udev SubUPnPCSInit stack-based overflowEPSS 1.3%CVE-2022-38750MEDIUMDoS in SnakeYAMLEPSS 1.3%CVE-2024-1002HIGHTotolink N200RE cstecgi.cgi setIpPortFilterRules stack-based overflowEPSS 1.3%CVE-2024-1000HIGHTotolink N200RE cstecgi.cgi setTracerouteCfg stack-based overflowEPSS 1.3%CVE-2025-7908HIGHD-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflowEPSS 1.3%CVE-2024-1003HIGHTotolink N200RE cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.3%CVE-2024-0997HIGHTotolink N200RE cstecgi.cgi setOpModeCfg stack-based overflowEPSS 1.3%CVE-2022-24290—A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), TeamcenterEPSS 1.2%CVE-2019-12266HIGHStack buffer overflow in Wyze Cam Pan v2, Cam v2 and Cam v3EPSS 1.2%CVE-2025-11326HIGHTenda AC18 WifiMacFilterSet stack-based overflowEPSS 1.2%CVE-2025-11327HIGHTenda AC18 SetUpnpCfg stack-based overflowEPSS 1.2%CVE-2025-9360HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflowEPSS 1.2%CVE-2023-24343HIGHD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule.EPSS 1.2%CVE-2024-28925HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.2%CVE-2026-7851HIGHD-Link DI-8100 yyxz.asp sprintf stack-based overflowEPSS 1.2%CVE-2019-18310—A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 ServEPSS 1.2%CVE-2022-26009HIGHA stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_0EPSS 1.2%