Falhas do tipo CWE-121

4.131 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2018-5002HIGHAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to aEPSS 24.4%KEVCVE-2019-10193HIGHA stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.EPSS 23.3%CVE-2025-7206CRITICALD-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflowEPSS 21.7%CVE-2017-3195—Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflEPSS 21.4%CVE-2025-8159HIGHD-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflowEPSS 20.6%CVE-2021-3064CRITICALPAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway InterfacesEPSS 20.1%CVE-2025-5623CRITICALD-Link DIR-816 qosClassifier stack-based overflowEPSS 19.5%CVE-2019-15683—TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could poEPSS 19.4%CVE-2023-48725HIGHA stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7EPSS 19.4%CVE-2021-34730CRITICALCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilityEPSS 18.5%CVE-2025-45797MEDIUMTOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validatioEPSS 18.3%CVE-2022-40152MEDIUMStack Buffer Overflow in WoodstoxEPSS 18.2%CVE-2019-3921—The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST reEPSS 17.9%CVE-2022-27791HIGHAdobe Acrobat Reader DC Font Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 17.8%CVE-2017-5177—A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability hasEPSS 17.7%CVE-2025-0283HIGHA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti NeuEPSS 17.5%CVE-2025-1340HIGHTOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflowEPSS 16.7%CVE-2018-14829—Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a maEPSS 16.1%CVE-2017-14016—A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper valiEPSS 16.0%CVE-2023-44018HIGHTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_whiEPSS 15.8%