Fallos del tipo CWE-121

3820 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2025-3820HIGHTenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflowEPSS 11.8%CVE-2021-38408—A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the lengEPSS 11.6%CVE-2025-3785HIGHD-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflowEPSS 11.4%CVE-2025-4544HIGHD-Link DI-8100 jhttpd ddos.asp stack-based overflowEPSS 10.9%CVE-2020-10881CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1EPSS 10.9%CVE-2025-7088HIGHBelkin F9K1122 webs formPPPoESetup stack-based overflowEPSS 10.9%CVE-2025-7087HIGHBelkin F9K1122 webs formL2TPSetup stack-based overflowEPSS 10.5%CVE-2021-38389CRITICALAdvantech WebAccessEPSS 10.4%CVE-2025-8017HIGHTenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflowEPSS 10.4%CVE-2023-20078CRITICALCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI VulnerabilitiesEPSS 10.4%CVE-2023-20079CRITICALCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI VulnerabilitiesEPSS 10.3%CVE-2020-27265—KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All verEPSS 10.1%CVE-2021-27413—Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, whicEPSS 10.0%CVE-2025-8184HIGHD-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflowEPSS 9.9%CVE-2017-9629—A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. ThEPSS 9.8%CVE-2022-20701CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.7%KEVCVE-2018-17614—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT Client prior to V2.7EPSS 9.7%CVE-2021-1609CRITICALCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management VulnerabilitiesEPSS 9.7%CVE-2021-43982HIGHDelta Electronics CNCSoftEPSS 9.6%CVE-2018-10636—CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could causEPSS 9.5%