Falhas do tipo CWE-121

3.562 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2025-22457CRITICALA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTAEPSS 100.0%KEVCVE-2025-0282CRITICALA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti NeuEPSS 100.0%KEVCVE-2021-20038CRITICALA Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticEPSS 99.9%KEVCVE-2009-0927HIGHStack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to eEPSS 96.6%KEVCVE-2020-10924HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rEPSS 87.3%CVE-2022-20705CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 80.0%CVE-2016-6563—D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login actionEPSS 79.9%CVE-2017-13089HIGHGNU Wget: stack overflow in HTTP protocol handlingEPSS 79.9%CVE-2026-41089CRITICALWindows Netlogon Remote Code Execution VulnerabilityEPSS 79.6%CVE-2008-0015HIGHStack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequesEPSS 76.7%KEVCVE-2022-20707CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 75.3%CVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2022-35690CRITICALAdobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 72.2%CVE-2018-10594—Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, EEPSS 69.0%CVE-2014-0783—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 68.4%CVE-2018-1161—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. AuthentEPSS 66.7%CVE-2021-33549HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCEEPSS 66.2%CVE-2014-2364—Advantech WebAccess Stack-Based Buffer OverflowEPSS 61.4%CVE-2023-31419MEDIUMElasticsearch StackOverflow vulnerabilityEPSS 60.7%CVE-2022-22274—A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of ServEPSS 57.3%