Fallos del tipo CWE-121

3831 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2025-70230CRITICALStack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.EPSS 0.8%CVE-2023-27369HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-37311HIGHD-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37326HIGHD-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-27368HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-37322HIGHD-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37312HIGHD-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37313HIGHD-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37319HIGHD-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37321HIGHD-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37318HIGHD-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37315HIGHD-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37314HIGHD-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37316HIGHD-Link DAP-2622 DDP Set IPv6 Address Default Gateway Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37317HIGHD-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37320HIGHD-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-14993HIGHTenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflowEPSS 0.8%CVE-2024-30627HIGHTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from saveParentControlInfo function.EPSS 0.8%CVE-2022-43764CRITICALBuffer overflow when changing configuration on Tbase ServerEPSS 0.8%CVE-2026-94184HIGHFetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)EPSS 0.8%