Falhas do tipo CWE-121

3.823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2018-5476—A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. StackEPSS 1.7%CVE-2022-36063HIGHUSBX Host CDC ECM integer underflow with buffer overflowEPSS 1.7%CVE-2022-32454CRITICALA stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.EPSS 1.7%CVE-2024-4119HIGHTenda W15E delIpMacBind formIPMacBindDel stack-based overflowEPSS 1.7%CVE-2024-4117HIGHTenda W15E DelPortMapping formDelPortMapping stack-based overflowEPSS 1.7%CVE-2024-4123HIGHTenda W15E SetPortMapping formSetPortMapping stack-based overflowEPSS 1.7%CVE-2024-4120HIGHTenda W15E modifyIpMacBind formIPMacBindModify stack-based overflowEPSS 1.7%CVE-2024-4118HIGHTenda W15E addIpMacBind formIPMacBindAdd stack-based overflowEPSS 1.7%CVE-2024-4121HIGHTenda W15E formQOSRuleDel stack-based overflowEPSS 1.7%CVE-2024-4122HIGHTenda W15E setDebugCfg formSetDebugCfg stack-based overflowEPSS 1.7%CVE-2024-2485HIGHTenda AC18 SetSpeedWan formSetSpeedWan stack-based overflowEPSS 1.7%CVE-2024-4115HIGHTenda W15E AddDnsForward formAddDnsForward stack-based overflowEPSS 1.7%CVE-2024-2892HIGHTenda AC7 setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-4124HIGHTenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflowEPSS 1.7%CVE-2024-2893HIGHTenda AC7 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.7%CVE-2024-4116HIGHTenda W15E DelDhcpRule formDelDhcpRule stack-based overflowEPSS 1.7%CVE-2024-4170HIGHTenda 4G300 sub_429A30 stack-based overflowEPSS 1.7%CVE-2024-3878HIGHTenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.7%CVE-2024-3876HIGHTenda F1202 VirtualSer fromVirtualSer stack-based overflowEPSS 1.7%CVE-2024-3008HIGHTenda FH1205 execCommand formexeCommand stack-based overflowEPSS 1.7%