Falhas do tipo CWE-121

3.825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2026-4226HIGHLB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflowEPSS 1.1%CVE-2020-8006HIGHThe server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time EPSS 1.1%CVE-2025-69764CRITICALTenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid sEPSS 1.1%CVE-2024-52544CRITICALLorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowEPSS 1.1%CVE-2020-35492—A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted inputEPSS 1.1%CVE-2023-32141HIGHD-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-50330HIGHA stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craftEPSS 1.1%CVE-2023-32146HIGHD-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-49867HIGHA stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craftEPSS 1.1%CVE-2023-32142HIGHD-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-9523CRITICALTenda AC1206 GetParentControlInfo stack-based overflowEPSS 1.1%CVE-2026-75784CRITICALTRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflowEPSS 1.1%CVE-2024-47909MEDIUMA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remEPSS 1.1%CVE-2026-15701CRITICALTotolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflowEPSS 1.1%CVE-2025-29135CRITICALA stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack oveEPSS 1.1%CVE-2024-47905MEDIUMA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remEPSS 1.1%CVE-2026-18589CRITICALWavlink WL-NU516U1 nas.cgi change_password stack-based overflowEPSS 1.1%CVE-2019-1185HIGHWindows Subsystem for Linux Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2026-18588CRITICALWavlink WL-NU516U1 nas.cgi fgets stack-based overflowEPSS 1.1%CVE-2026-79911CRITICALTOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflowEPSS 1.1%