Falhas do tipo CWE-121

3.821 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-41592HIGHDrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extrEPSS 1.4%CVE-2020-14511—Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EEPSS 1.4%CVE-2025-9481HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflowEPSS 1.4%CVE-2023-35322HIGHWindows Deployment Services Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-5912HIGHD-Link DIR-632 HTTP POST Request do_file stack-based overflowEPSS 1.4%CVE-2023-21732HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.4%CVE-2021-34980HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouEPSS 1.4%CVE-2024-2807HIGHTenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflowEPSS 1.4%CVE-2024-2808HIGHTenda AC15 QuickIndex formQuickIndex stack-based overflowEPSS 1.4%CVE-2025-68670CRITICALxrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer OverflowEPSS 1.4%CVE-2024-7581HIGHTenda A301 WifiBasicSet formWifiBasicSet stack-based overflowEPSS 1.4%CVE-2009-20005CRITICALInterSystems Caché UtilConfigHome.csp Stack Buffer OverflowEPSS 1.4%CVE-2024-9043CRITICALCellopoint Secure Email Gateway - Buffer OverflowEPSS 1.4%CVE-2024-48871CRITICALPlanet Technology Planet WGS-804HPT Stack-based Buffer OverflowEPSS 1.4%CVE-2024-6189HIGHTenda A301 WifiExtraSet fromSetWirelessRepeat stack-based overflowEPSS 1.4%CVE-2024-4171HIGHTenda W30E WizardHandle fromWizardHandle stack-based overflowEPSS 1.4%CVE-2024-37971HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2025-5215HIGHD-Link DCS-5020L ptdc.cgi websReadEvent stack-based overflowEPSS 1.4%CVE-2021-40118HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilitiesEPSS 1.4%CVE-2024-4251HIGHTenda i21 DhcpSetSe fromDhcpSetSer stack-based overflowEPSS 1.3%