Falhas do tipo CWE-121

3.808 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-4494HIGHTenda i21 setUplinkInfo formSetUplinkInfo stack-based overflowEPSS 1.5%CVE-2024-4491HIGHTenda i21 formGetDiagnoseInfo stack-based overflowEPSS 1.5%CVE-2024-4492HIGHTenda i21 setStaOffline formOfflineSet stack-based overflowEPSS 1.5%CVE-2024-4113HIGHTenda TX9 SetSysTimeCfg sub_42D4DC stack-based overflowEPSS 1.5%CVE-2024-4493HIGHTenda i21 formSetAutoPing stack-based overflowEPSS 1.5%CVE-2024-4238HIGHTenda AX1806 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.5%CVE-2024-26180HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.5%CVE-2024-4237HIGHTenda AX1806 execCommand R7WebsSecurityHandler stack-based overflowEPSS 1.5%CVE-2024-3879HIGHTenda W30E setcfm formSetCfm stack-based overflowEPSS 1.5%CVE-2024-4239HIGHTenda AX1806 SetRebootTimer formSetRebootTimer stack-based overflowEPSS 1.5%CVE-2024-4240HIGHTenda W9 formQosManageDouble_user stack-based overflowEPSS 1.5%CVE-2021-27398—A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validEPSS 1.5%CVE-2021-27396—A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validEPSS 1.5%CVE-2024-3882HIGHTenda W30E fromRouteStatic stack-based overflowEPSS 1.4%CVE-2022-2304HIGHStack-based Buffer Overflow in vim/vimEPSS 1.4%CVE-2022-28772—By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.EPSS 1.4%CVE-2019-13518—An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor VEPSS 1.4%CVE-2025-1853HIGHTenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflowEPSS 1.4%CVE-2022-27646HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9EPSS 1.4%CVE-2019-13540—Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing speEPSS 1.4%