Falhas do tipo CWE-121

4.132 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2019-10947—Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities maEPSS 3.7%CVE-2019-19333HIGHIn all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of tEPSS 3.6%CVE-2019-10164HIGHPostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user cEPSS 3.6%CVE-2019-3951—Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corrEPSS 3.6%CVE-2020-9725HIGHFrameMaker File Parsing Stack-based Buffer OverflowEPSS 3.6%CVE-2018-14802—Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The proEPSS 3.6%CVE-2025-1876MEDIUMD-Link DAP-1562 HTTP Header http_request_parse stack-based overflowEPSS 3.6%CVE-2017-9638—Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in aEPSS 3.5%CVE-2020-6989—In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serveEPSS 3.5%CVE-2018-14818—WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflowEPSS 3.5%CVE-2018-10621—Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger thEPSS 3.5%CVE-2025-24922HIGHDell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerabilityEPSS 3.5%CVE-2023-28760HIGHTP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the dbEPSS 3.4%CVE-2026-4747HIGHRemote code execution via RPCSEC_GSS packet validationEPSS 3.4%CVE-2025-7795HIGHTenda FH451 P2pListFilter fromP2pListFilter stack-based overflowEPSS 3.4%CVE-2024-47962HIGHStack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2EPSS 3.4%CVE-2022-26002CRITICALA stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-cEPSS 3.4%CVE-2022-20825CRITICALCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilityEPSS 3.4%CVE-2022-2825CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. AuthenticaEPSS 3.4%CVE-2020-17413HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaEPSS 3.4%