Falhas do tipo CWE-121

4.110 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-36258CRITICALA stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210EPSS 12.8%CVE-2025-3785HIGHD-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflowEPSS 12.8%CVE-2025-3820HIGHTenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflowEPSS 12.7%CVE-2025-5527HIGHTenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflowEPSS 12.7%CVE-2024-53703HIGHA vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web servEPSS 12.6%CVE-2020-27265—KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All verEPSS 12.5%CVE-2020-16243—Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially EPSS 12.4%CVE-2017-15118HIGHA stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an exporEPSS 11.9%CVE-2025-4544HIGHD-Link DI-8100 jhttpd ddos.asp stack-based overflowEPSS 11.8%CVE-2021-38408—A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the lengEPSS 11.6%CVE-2021-38389CRITICALAdvantech WebAccessEPSS 10.4%CVE-2023-20078CRITICALCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI VulnerabilitiesEPSS 10.4%CVE-2023-20079CRITICALCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI VulnerabilitiesEPSS 10.3%CVE-2025-9482HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflowEPSS 10.1%CVE-2021-27413—Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, whicEPSS 10.0%CVE-2017-9629—A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. ThEPSS 9.8%CVE-2022-20701CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.7%KEVCVE-2018-17614—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT Client prior to V2.7EPSS 9.7%CVE-2021-1609CRITICALCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management VulnerabilitiesEPSS 9.7%CVE-2021-43982HIGHDelta Electronics CNCSoftEPSS 9.6%