Fallos del tipo CWE-121

3825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2021-25667MEDIUMA vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4),EPSS 0.9%CVE-2025-7790HIGHD-Link DI-8100 HTTP Request menu_nat.asp stack-based overflowEPSS 0.9%CVE-2026-49759HIGHStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashEPSS 0.9%CVE-2026-69614HIGHMicrosoft Office Access Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-29164CRITICALHDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causingEPSS 0.9%CVE-2023-41028CRITICALJuplink RX4-1500 Stack-based Buffer Overflow VulnerabilityEPSS 0.9%CVE-2023-27361MEDIUMNETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-9791HIGHTenda AC20 fromAdvSetMacMtuWan stack-based overflowEPSS 0.9%CVE-2026-15693HIGHTenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflowEPSS 0.9%CVE-2026-19822HIGHTenda W20E QoS Edit editQos lstAdd stack-based overflowEPSS 0.9%CVE-2026-13516HIGHTenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflowEPSS 0.9%CVE-2026-19846HIGHTOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflowEPSS 0.9%CVE-2026-19788HIGHTenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflowEPSS 0.9%CVE-2026-76590CRITICALTRENDnet TEW-755AP ssi wan.cgi stack-based overflowEPSS 0.9%CVE-2026-75877CRITICALTRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflowEPSS 0.9%CVE-2026-13517HIGHTenda JD12L WifiBasicSet formWifiBasicSet stack-based overflowEPSS 0.9%CVE-2026-76584CRITICALTRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflowEPSS 0.9%CVE-2026-15692HIGHTenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflowEPSS 0.9%CVE-2026-13518HIGHTenda JD12L addressNat fromAddressNat stack-based overflowEPSS 0.9%CVE-2026-13519HIGHTenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 0.9%