Falhas do tipo CWE-121

3.823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2025-7911HIGHD-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflowEPSS 1.5%CVE-2022-2304HIGHStack-based Buffer Overflow in vim/vimEPSS 1.5%CVE-2024-0999HIGHTotolink N200RE cstecgi.cgi setParentalRules stack-based overflowEPSS 1.5%CVE-2023-48724HIGHA memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 EPSS 1.5%CVE-2024-2709HIGHTenda AC10U SetStaticRouteCfg fromSetRouteStatic stack-based overflowEPSS 1.5%CVE-2024-2710HIGHTenda AC10U openSchedWifi setSchedWifi stack-based overflowEPSS 1.5%CVE-2024-2711HIGHTenda AC10U addWifiMacFilter stack-based overflowEPSS 1.5%CVE-2021-23206—A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to execute arbitrary code EPSS 1.5%CVE-2024-2990HIGHTenda FH1203 execCommand formexeCommand stack-based overflowEPSS 1.5%CVE-2024-2994HIGHTenda FH1203 GetParentControlInfo stack-based overflowEPSS 1.5%CVE-2024-2705HIGHTenda AC10U SetNetControlList formSetQosBand stack-based overflowEPSS 1.5%CVE-2024-2708HIGHTenda AC10U execCommand formexeCommand stack-based overflowEPSS 1.5%CVE-2024-2764HIGHTenda AC10U SetPptpServerCfg formSetPPTPServer stack-based overflowEPSS 1.5%CVE-2023-24018HIGHA stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3EPSS 1.5%CVE-2021-34863HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routerEPSS 1.5%CVE-2024-7909HIGHTOTOLINK EX1200L cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.5%CVE-2024-7908HIGHTOTOLINK EX1200L cstecgi.cgi setDefResponse stack-based overflowEPSS 1.5%CVE-2025-4356HIGHTenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflowEPSS 1.5%CVE-2025-9527HIGHLinksys E1700 QoSSetup stack-based overflowEPSS 1.5%CVE-2024-7614HIGHTenda FH1206 qossetting fromqossetting stack-based overflowEPSS 1.5%