Falhas do tipo CWE-121

4.132 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2023-2575HIGHAuthenticated Buffer OverflowEPSS 15.5%CVE-2025-8184HIGHD-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflowEPSS 15.4%CVE-2024-0930MEDIUMTenda AC10U fromSetWirelessRepeat stack-based overflowEPSS 15.2%CVE-2021-32941CRITICALAnnke Network Video Recorder - Stack-based Buffer OverflowEPSS 15.2%CVE-2024-26305CRITICALThere is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendinEPSS 15.2%CVE-2024-4236HIGHTenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflowEPSS 14.9%CVE-2022-20708CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 14.9%KEVCVE-2020-12497HIGHPhoenix Contact Automation Worx <= 1.87: stack-based overflowEPSS 14.7%CVE-2024-33512CRITICALThere is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remEPSS 14.6%CVE-2024-33511CRITICALThere is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code executEPSS 14.6%CVE-2014-0787—WellinTech KingSCADA Stack-based Buffer OverflowEPSS 14.1%CVE-2025-7088HIGHBelkin F9K1122 webs formPPPoESetup stack-based overflowEPSS 13.8%CVE-2025-7087HIGHBelkin F9K1122 webs formL2TPSetup stack-based overflowEPSS 13.4%CVE-2023-43237HIGHD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC.EPSS 13.3%CVE-2023-43239HIGHD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC.EPSS 13.3%CVE-2025-8017HIGHTenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflowEPSS 13.2%CVE-2025-3538HIGHD-Link DI-8100 jhttpd auth.asp auth_asp stack-based overflowEPSS 13.2%CVE-2023-4249HIGHZavio IP Camera Stack-Based Buffer OverflowEPSS 12.9%CVE-2025-51087HIGHTenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time lEPSS 12.9%CVE-2019-3822HIGHlibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3EPSS 12.9%