Fallos del tipo CWE-121

3820 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2024-7441HIGHVivotek SD9364 httpd read stack-based overflowEPSS 8.1%CVE-2023-38148HIGHInternet Connection Sharing (ICS) Remote Code Execution VulnerabilityEPSS 7.9%CVE-2021-35004HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 relEPSS 7.7%CVE-2021-35003CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 reEPSS 7.7%CVE-2020-27261—Omron CX-OneEPSS 7.6%CVE-2026-10187CRITICALTotolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflowEPSS 7.3%CVE-2017-14854CRITICALA stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects alEPSS 7.3%CVE-2018-17930—A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, which may allow remoteEPSS 7.3%CVE-2022-24049CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systeEPSS 7.2%CVE-2025-2097HIGHTOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflowEPSS 7.2%CVE-2014-125117CRITICALD-Link info.cgi POST Request Stack-Based Buffer Overflow RCEEPSS 7.2%CVE-2021-38402HIGHDelta Electronics DOPSoft 2 Stack-Based Buffer OverflowEPSS 7.1%CVE-2025-5853HIGHTenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowEPSS 7.1%CVE-2015-6490CRITICALStack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remoteEPSS 7.0%CVE-2019-3930—The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1EPSS 7.0%CVE-2025-3693HIGHTenda W12 httpd cgiWifiRadioSet stack-based overflowEPSS 6.9%CVE-2020-17407CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112EPSS 6.8%CVE-2021-36005HIGHAdobe Photoshop PSD File Parsing Stack Overflow VulnerabilityEPSS 6.8%CVE-2023-46223CRITICALAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofEPSS 6.8%CVE-2025-62507HIGHRedis: Bug in XACKDEL may lead to stack overflow and potential RCEEPSS 6.8%