Falhas do tipo CWE-121

3.819 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2022-27646HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9EPSS 1.4%CVE-2019-13540—Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing speEPSS 1.4%CVE-2021-3057HIGHGlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or GatewayEPSS 1.4%CVE-2018-6339—When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An offEPSS 1.4%CVE-2025-9525HIGHLinksys E1700 setWan stack-based overflowEPSS 1.4%CVE-2025-9526HIGHLinksys E1700 setSysAdm stack-based overflowEPSS 1.4%CVE-2023-47856HIGHA stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A spEPSS 1.4%CVE-2023-50239HIGHTwo stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11EPSS 1.4%CVE-2023-50243HIGHTwo stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially EPSS 1.4%CVE-2023-50244HIGHTwo stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially EPSS 1.4%CVE-2023-50240HIGHTwo stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11EPSS 1.4%CVE-2012-10058CRITICALRabidHamster R4 Log Entry sprintf() Buffer OverflowEPSS 1.4%CVE-2020-15744CRITICALStack-based buffer overflow leading to RCE in Victure CameraEPSS 1.4%CVE-2024-43549HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.4%CVE-2018-1046HIGHpdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaEPSS 1.4%CVE-2023-46714MEDIUMA stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allowsEPSS 1.4%CVE-2024-1001HIGHTotolink N200RE cstecgi.cgi main stack-based overflowEPSS 1.4%CVE-2024-0998HIGHTotolink N200RE cstecgi.cgi setDiagnosisCfg stack-based overflowEPSS 1.4%CVE-2024-0538HIGHTenda W9 httpd formQosManage_auto stack-based overflowEPSS 1.4%CVE-2024-0536HIGHTenda W9 httpd setWrlAccessList stack-based overflowEPSS 1.4%