Falhas do tipo CWE-121

3.823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2021-1573HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilityEPSS 1.3%CVE-2024-3874HIGHTenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflowEPSS 1.3%CVE-2024-2581HIGHTenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflowEPSS 1.3%CVE-2024-0542HIGHTenda W9 httpd formWifiMacFilterGet stack-based overflowEPSS 1.3%CVE-2024-0541HIGHTenda W9 httpd formAddSysLogRule stack-based overflowEPSS 1.3%CVE-2024-0537HIGHTenda W9 httpd setWrlBasicInfo stack-based overflowEPSS 1.3%CVE-2024-10662HIGHTenda AC15 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.3%CVE-2024-0539HIGHTenda W9 httpd formQosManage_user stack-based overflowEPSS 1.3%CVE-2023-7219HIGHTotolink N350RT cstecgi.cgi loginAuth stack-based overflowEPSS 1.3%CVE-2025-6292HIGHD-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflowEPSS 1.3%CVE-2020-16234—FATEK Automation PLC WinProladderEPSS 1.3%CVE-2025-6291HIGHD-Link DIR-825 HTTP POST Request do_file stack-based overflowEPSS 1.3%CVE-2024-2850HIGHTenda AC15 saveParentControlInfo stack-based overflowEPSS 1.3%CVE-2024-2855HIGHTenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflowEPSS 1.3%CVE-2024-2852HIGHTenda AC15 saveParentControlInfo stack-based overflowEPSS 1.3%CVE-2024-8229HIGHTenda O6 operateMacFilter frommacFilterModify stack-based overflowEPSS 1.3%CVE-2024-10434HIGHTenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflowEPSS 1.3%CVE-2019-13537—The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerabiEPSS 1.3%CVE-2017-20242CRITICALKeysight IxChariot Endpoint stack-based buffer overflowEPSS 1.3%CVE-2024-36435CRITICALAn issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules). An unautEPSS 1.3%