Falhas do tipo CWE-121

3.824 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2021-26635HIGHBandisoft ARK Library buffer overflow vulnerabilityEPSS 1.2%CVE-2025-60694HIGHA stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_vEPSS 1.1%CVE-2025-6614HIGHD-Link DIR-619L formSetWANType_Wizard5 stack-based overflowEPSS 1.1%CVE-2025-6615HIGHD-Link DIR-619L formAutoDetecWAN_wizard4 stack-based overflowEPSS 1.1%CVE-2024-0575HIGHTotolink LR1200GB cstecgi.cgi setTracerouteCfg stack-based overflowEPSS 1.1%CVE-2024-0574HIGHTotolink LR1200GB cstecgi.cgi setParentalRules stack-based overflowEPSS 1.1%CVE-2022-35299—SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a meEPSS 1.1%CVE-2020-7002—Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be exploited when a valid usEPSS 1.1%CVE-2026-90823CRITICALFatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /uEPSS 1.1%CVE-2025-2369HIGHTOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflowEPSS 1.1%CVE-2025-2370HIGHTOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflowEPSS 1.1%CVE-2023-0855CRITICALBuffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an EPSS 1.1%CVE-2023-0852CRITICALBuffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which maEPSS 1.1%CVE-2023-0856CRITICALBuffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attaEPSS 1.1%CVE-2024-31466CRITICALUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolEPSS 1.1%CVE-2024-31467CRITICALUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolEPSS 1.1%CVE-2024-31469CRITICALThere are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code exEPSS 1.1%CVE-2024-31468CRITICALThere are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code exEPSS 1.1%CVE-2023-33220CRITICALStack Buffer Overflow when checking some attributes during retrofitEPSS 1.1%CVE-2023-33218CRITICALStack Buffer Overflow in a binary run at upgrade startupEPSS 1.1%