Falhas do tipo CWE-121

3.823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-2704HIGHTenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflowEPSS 1.5%CVE-2024-2763HIGHTenda AC10U setcfm formSetCfm stack-based overflowEPSS 1.5%CVE-2024-2811HIGHTenda AC15 WifiWpsStart formWifiWpsStart stack-based overflowEPSS 1.5%CVE-2018-6339—When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An offEPSS 1.5%CVE-2023-34095CRITICALcpdb-libs vulnerable to buffer overflows via scanfEPSS 1.5%CVE-2023-50186HIGHGStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.5%CVE-2024-2488HIGHTenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflowEPSS 1.5%CVE-2020-27221—In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natEPSS 1.5%CVE-2020-16209CRITICALFieldcomm Group HART-IP and hipserver - Stack-based Buffer OverflowEPSS 1.5%CVE-2021-34978HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouEPSS 1.5%CVE-2017-15101HIGHA missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could caEPSS 1.5%CVE-2025-3710CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2025-3711CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2025-3714CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2013-2597HIGHStack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used EPSS 1.5%KEVCVE-2023-25081HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25124HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2022-2471CRITICALStack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection componentEPSS 1.5%CVE-2023-7220CRITICALTotolink NR1800X cstecgi.cgi loginAuth stack-based overflowEPSS 1.5%CVE-2022-0408HIGHStack-based Buffer Overflow in vim/vimEPSS 1.5%