Falhas do tipo CWE-121

3.823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2023-49912HIGHA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO GiEPSS 1.8%CVE-2021-31507HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User inEPSS 1.8%CVE-2024-29045HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2021-46154—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2021-46155—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2021-46158—A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application EPSS 1.8%CVE-2024-3010HIGHTenda FH1205 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-3905HIGHTenda AC500 execCommand R7WebsSecurityHandler stack-based overflowEPSS 1.8%CVE-2024-2978HIGHTenda F1203 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-2977HIGHTenda F1203 QuickIndex formQuickIndex stack-based overflowEPSS 1.8%CVE-2024-2980HIGHTenda FH1202 execCommand formexeCommand stack-based overflowEPSS 1.8%CVE-2024-2981HIGHTenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowEPSS 1.8%CVE-2024-3877HIGHTenda F1202 fromqossetting stack-based overflowEPSS 1.8%CVE-2024-4167HIGHTenda 4G300 sub_422AA4 stack-based overflowEPSS 1.8%CVE-2017-7910—A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be ableEPSS 1.8%CVE-2017-16751—A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or priEPSS 1.8%CVE-2024-0532HIGHTenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflowEPSS 1.8%CVE-2024-4126HIGHTenda W15E SetSysTimeCfg formSetSysTime stack-based overflowEPSS 1.8%CVE-2024-4066HIGHTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowEPSS 1.8%CVE-2024-4127HIGHTenda W15E guestWifiRuleRefresh stack-based overflowEPSS 1.8%