Fallos del tipo CWE-121

3826 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-31469CRITICALThere are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code exEPSS 1.1%CVE-2023-33218CRITICALStack Buffer Overflow in a binary run at upgrade startupEPSS 1.1%CVE-2023-33220CRITICALStack Buffer Overflow when checking some attributes during retrofitEPSS 1.1%CVE-2023-33219CRITICALStack Buffer Overflow when checking retrofit packageEPSS 1.1%CVE-2023-51613MEDIUMD-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-9087HIGHTenda AC20 SetNetControlList Endpoint set_qosMib_list stack-based overflowEPSS 1.1%CVE-2023-35743HIGHD-Link DAP-2622 DDP Configuration Restore Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2010-20119HIGHCommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer OverflowEPSS 1.1%CVE-2025-34107HIGHWinaXe 7.7 FTP Client Remote Buffer OverflowEPSS 1.1%CVE-2026-3613HIGHWavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflowEPSS 1.1%CVE-2021-26567—Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filEPSS 1.1%CVE-2022-42444MEDIUMIBM App Connect Enterprise denial of serviceEPSS 1.1%CVE-2023-51619MEDIUMD-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51618MEDIUMD-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51614MEDIUMD-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51623MEDIUMD-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51620MEDIUMD-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51622MEDIUMD-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51617MEDIUMD-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51616MEDIUMD-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%