Fallos del tipo CWE-121

3827 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2022-47065HIGHTrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url EPSS 1.1%CVE-2026-30872CRITICALOpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookupEPSS 1.1%CVE-2023-35725HIGHD-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-15180HIGHTenda WH450 HTTP Request webExcptypemanFilte stack-based overflowEPSS 1.1%CVE-2025-1851HIGHTenda AC7 SetFirewallCfg formSetFirewallCfg stack-based overflowEPSS 1.1%CVE-2025-7855HIGHTenda FH451 qossetting fromqossetting stack-based overflowEPSS 1.1%CVE-2025-15161HIGHTenda WH450 PPTPUserSetting stack-based overflowEPSS 1.1%CVE-2025-7532HIGHTenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.1%CVE-2014-125122MEDIUMLinksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password ResetEPSS 1.1%CVE-2011-10032CRITICALSunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57EPSS 1.1%CVE-2023-42790HIGHA stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.EPSS 1.1%CVE-2022-41140HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. AuthentEPSS 1.1%CVE-2024-11056HIGHTenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflowEPSS 1.1%CVE-2023-35752HIGHD-Link DAP-2622 DDP Set AG Profile Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35739HIGHD-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35741HIGHD-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35731HIGHD-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35746HIGHD-Link DAP-2622 DDP Firmware Upgrade Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35740HIGHD-Link DAP-2622 DDP Configuration Backup Server Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35754HIGHD-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%