Falhas do tipo CWE-121

3.823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-4066HIGHTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowEPSS 1.8%CVE-2024-4126HIGHTenda W15E SetSysTimeCfg formSetSysTime stack-based overflowEPSS 1.8%CVE-2024-4168HIGHTenda 4G300 sub_4260F0 stack-based overflowEPSS 1.8%CVE-2024-4169HIGHTenda 4G300 sub_4279CC stack-based overflowEPSS 1.8%CVE-2024-2902HIGHTenda AC7 WifiGuestSet fromSetWifiGusetBasic stack-based overflowEPSS 1.8%CVE-2024-2985HIGHTenda FH1202 QuickIndex formQuickIndex stack-based overflowEPSS 1.8%CVE-2024-4166HIGHTenda 4G300 sub_41E858 stack-based overflowEPSS 1.8%CVE-2024-2984HIGHTenda FH1202 setcfm formSetCfm stack-based overflowEPSS 1.8%CVE-2024-2983HIGHTenda FH1202 SetClientState formSetClientState stack-based overflowEPSS 1.8%CVE-2021-32947—FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to executEPSS 1.8%CVE-2018-17929—In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploEPSS 1.8%CVE-2018-18993—Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prioEPSS 1.8%CVE-2022-23946HIGHA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality of KiCad EDA 6EPSS 1.7%CVE-2024-2706HIGHTenda AC10U WifiWpsStart formWifiWpsStart stack-based overflowEPSS 1.7%CVE-2024-0533HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2012-10023MEDIUMFreeFloat FTP Server USER Command Buffer OverflowEPSS 1.7%CVE-2024-3910HIGHTenda AC500 DhcpListClient fromDhcpListClient stack-based overflowEPSS 1.7%CVE-2026-24881HIGHIn GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffeEPSS 1.7%CVE-2024-4112HIGHTenda TX9 SetVirtualServerCfg sub_42CB94 stack-based overflowEPSS 1.7%CVE-2022-25753—A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XEPSS 1.7%