Fallos del tipo CWE-121

3825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2026-13515HIGHTenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflowEPSS 0.9%CVE-2026-13516HIGHTenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflowEPSS 0.9%CVE-2026-75877CRITICALTRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflowEPSS 0.9%CVE-2026-19789HIGHTenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflowEPSS 0.9%CVE-2026-13517HIGHTenda JD12L WifiBasicSet formWifiBasicSet stack-based overflowEPSS 0.9%CVE-2026-19811HIGHTOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflowEPSS 0.9%CVE-2026-15694HIGHTenda BE12 Pro SetIpBind fromSetIpBind stack-based overflowEPSS 0.9%CVE-2026-19812HIGHTOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflowEPSS 0.9%CVE-2026-10063HIGHTRENDnet TEW-432BRP formWPS stack-based overflowEPSS 0.9%CVE-2017-16327HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16326HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16328HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16266HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16294HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16267HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16324HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16297HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16258HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16262HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16331HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%