Falhas do tipo CWE-121

3.832 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-8408MEDIUMLinksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflowEPSS 0.8%CVE-2023-5055HIGHL2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()EPSS 0.8%CVE-2023-44417HIGHD-Link DAP-2622 DDP Set IPv4 Address Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-44405HIGHD-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2017-12732—A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next pEPSS 0.8%CVE-2023-44404HIGHD-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-44406HIGHD-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-44409HIGHD-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-44407HIGHD-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-44408HIGHD-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2020-7837HIGHAn issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub_41EAF0 at MLReportDeamon.exe. The functEPSS 0.7%CVE-2025-34468HIGHlibcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCEEPSS 0.7%CVE-2024-37984HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 0.7%CVE-2025-0840MEDIUMGNU Binutils objdump.c disassemble_bytes stack-based overflowEPSS 0.7%CVE-2023-41217HIGHD-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-5401HIGHServer receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to EPSS 0.7%CVE-2023-5395HIGHServer receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote codEPSS 0.7%CVE-2025-14994HIGHTenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflowEPSS 0.7%CVE-2026-60095MEDIUMVinchin Backup & Recovery 9.0.0.86562 Stack Buffer Overflow via ModuleHandShakeEPSS 0.7%CVE-2024-24684HIGHMultiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can EPSS 0.7%