Falhas do tipo CWE-121

3.847 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-34579HIGHFuji Electric Alpha5 SMART Stack-Based Buffer OverflowEPSS 0.3%CVE-2026-69277HIGHMicrosoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-5056HIGHGStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-5829MEDIUMAutel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-30289HIGHAdobe FrameMaker XLS File Parsing Buffer OverflowEPSS 0.3%CVE-2025-69195HIGHWget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urlsEPSS 0.3%CVE-2024-13045HIGHAshlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-22319MEDIUMStack-Based Buffer Overflow in File Install Parameter HandlingEPSS 0.3%CVE-2024-9726HIGHTrimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-28032HIGHTOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000REPSS 0.3%CVE-2026-22318MEDIUMStack-Based Buffer Overflow in File Transfer Parameter HandlingEPSS 0.3%CVE-2026-41429HIGHImproper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruptionEPSS 0.3%CVE-2026-54502MEDIUMOj: Stack Buffer Overflow in Oj.dump via Large IndentEPSS 0.3%CVE-2023-50234HIGHHancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-47971HIGHMedia Encoder | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-27267HIGHIllustrator | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-48389HIGHDNG SDK | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-34702HIGHInDesign Desktop | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-48417HIGHSubstance3D - Sampler | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-47959HIGHAcrobat Reader | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%