Falhas do tipo CWE-121

3.819 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2021-44703HIGHAdobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code executionEPSS 57.3%CVE-2018-1161—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. AuthentEPSS 57.1%CVE-2014-0782—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 56.8%CVE-2025-40596HIGHA Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of SeEPSS 56.5%CVE-2018-20247—In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree EPSS 54.5%CVE-2023-3959CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 48.8%CVE-2024-26304CRITICALThere is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code executionEPSS 44.0%CVE-2022-35710CRITICALAdobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 42.6%CVE-2023-0656—A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which EPSS 41.3%CVE-2026-2329CRITICALGrandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflowEPSS 40.6%CVE-2025-20352HIGHA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the fEPSS 39.4%KEVCVE-2024-27130HIGHQTS, QuTS heroEPSS 37.5%CVE-2020-5735HIGHAmcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issEPSS 36.2%KEVCVE-2014-0784—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 35.9%CVE-2021-42756CRITICALMultiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and EPSS 35.0%CVE-2026-0826CRITICALPoly Voice – Possible Remote Control of Certain Poly DevicesEPSS 32.2%CVE-2021-21892CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEEPSS 30.4%CVE-2025-32756CRITICALA stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionEPSS 29.8%KEVCVE-2021-36301MEDIUMDell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticatedEPSS 27.7%CVE-2018-5002HIGHAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to aEPSS 25.1%KEV