Falhas do tipo CWE-121

3.824 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2023-33219CRITICALStack Buffer Overflow when checking retrofit packageEPSS 1.1%CVE-2023-33218CRITICALStack Buffer Overflow in a binary run at upgrade startupEPSS 1.1%CVE-2023-51613MEDIUMD-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35743HIGHD-Link DAP-2622 DDP Configuration Restore Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2010-20119HIGHCommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer OverflowEPSS 1.1%CVE-2025-34107HIGHWinaXe 7.7 FTP Client Remote Buffer OverflowEPSS 1.1%CVE-2026-3613HIGHWavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflowEPSS 1.1%CVE-2021-26567—Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filEPSS 1.1%CVE-2022-42444MEDIUMIBM App Connect Enterprise denial of serviceEPSS 1.1%CVE-2024-51979HIGHAuthenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc.EPSS 1.1%CVE-2023-51618MEDIUMD-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51621MEDIUMD-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51614MEDIUMD-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51620MEDIUMD-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51623MEDIUMD-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51622MEDIUMD-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51616MEDIUMD-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51615MEDIUMD-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51619MEDIUMD-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-51617MEDIUMD-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%