Falhas do tipo CWE-121

3.848 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-53311MEDIUMA Stack buffer overflow in the arguments parameter in Immunity Inc. Immunity Debugger v1.85 allows attackers to execute arbitrary code via aEPSS 0.3%CVE-2025-7623MEDIUMSupermicro BMC SMASH services has a Stack-based buffer overflow vulnerabilityEPSS 0.3%CVE-2024-11802HIGHFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-36773MEDIUMShenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the Go parameter ofEPSS 0.3%CVE-2024-11789HIGHFuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11787HIGHFuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11800HIGHFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11791HIGHFuji Electric Monitouch V-SFT V8C File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-36772MEDIUMShenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameEPSS 0.3%CVE-2024-11792HIGHFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11799HIGHFuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11795HIGHFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-19774HIGHBlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-34451MEDIUMrofl0r/proxychains-ng <= 4.17 Stack-based Buffer OverflowEPSS 0.3%CVE-2025-49528HIGHIllustrator | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2025-49527HIGHIllustrator | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-32707MEDIUMPX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loopEPSS 0.3%CVE-2025-45587HIGHA stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via aEPSS 0.3%CVE-2024-44387MEDIUMTenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.EPSS 0.3%CVE-2026-32195HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.3%