Falhas do tipo CWE-121

3.851 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2023-21632HIGHStack-based Buffer Overflow in Automotive GPUEPSS 0.1%CVE-2023-24854HIGHStack-based Buffer Overflow in WLAN HOSTEPSS 0.1%CVE-2026-88047HIGHTesseract: ReadNormProtos stack buffer overflowEPSS 0.1%CVE-2022-33264HIGHStack-based buffer overflow in ModemEPSS 0.1%CVE-2024-51395MEDIUMBuffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a dEPSS 0.1%CVE-2025-7019MEDIUMAvast antivirus stack overflow when scanning a malformed Office Open XML fileEPSS 0.1%CVE-2026-18909MEDIUMA stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). DuriEPSS 0.1%CVE-2023-43549HIGHStack-based Buffer Overflow in WLAN HALEPSS 0.1%CVE-2024-21474HIGHStack-based Buffer Overflow in PMICEPSS 0.1%CVE-2026-58008HIGHUnchecked HKDF key-size input in EL3 causes a stack buffer overflowEPSS 0.1%CVE-2024-23374MEDIUMStack-based Buffer Overflow in Power Management ICEPSS 0.1%CVE-2026-13465HIGHEL3 Stack Buffer Overflow in FCS HKDF RequestEPSS 0.1%CVE-2026-25268HIGHStack-based Buffer Overflow in WLAN HostEPSS 0.1%CVE-2024-48519MEDIUMBuffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denialEPSS 0.1%CVE-2024-43048HIGHStack-based Buffer Overflow in PerformanceEPSS 0.1%CVE-2024-43050HIGHStack-based Buffer Overflow in WLAN Windows HostEPSS 0.1%CVE-2024-38410HIGHStack-based Buffer Overflow in WLAN Windows HostEPSS 0.1%CVE-2026-0819LOWStack buffer overflow in PKCS7 SignedData encoding with custom signed attributesEPSS 0.1%CVE-2026-24085HIGHStack-based Buffer Overflow in DisplayEPSS 0.1%CVE-2025-47391HIGHStack-based Buffer Overflow in Camera DriverEPSS 0.1%