Fallos del tipo CWE-121

3827 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2023-51616MEDIUMD-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51615MEDIUMD-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2010-20112CRITICALAmlibweb NetOpacs webquery.dll Stack Buffer OverflowEPSS 1.1%CVE-2025-14136HIGHLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflowEPSS 1.1%CVE-2026-2567HIGHWavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflowEPSS 1.1%CVE-2022-24674HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 EPSS 1.1%CVE-2022-42060HIGHTenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerabilitEPSS 1.1%CVE-2024-6144HIGHActiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2024-6146HIGHActiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2024-5950HIGHDeep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-9105MEDIUMAuthenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web InterfaceEPSS 1.1%CVE-2025-3259HIGHTenda RX3 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.1%CVE-2024-7151HIGHTenda O3 setMacFilter fromMacFilterSet stack-based overflowEPSS 1.1%CVE-2024-39791CRITICALVonets WiFi Bridges Stack-based Buffer OverflowEPSS 1.1%CVE-2026-37541CRITICALBuffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary EPSS 1.1%CVE-2026-4747HIGHRemote code execution via RPCSEC_GSS packet validationEPSS 1.1%CVE-2025-9298HIGHTenda M3 QuickIndex formQuickIndex stack-based overflowEPSS 1.1%CVE-2024-5948HIGHDeep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-26506CRITICALCertain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of PrivilegeEPSS 1.1%CVE-2008-20001HIGHactivePDF WebGrabber ActiveX Control Buffer OverflowEPSS 1.1%