Falhas do tipo CWE-121

3.825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2022-47065HIGHTrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url EPSS 1.1%CVE-2026-30872CRITICALOpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookupEPSS 1.1%CVE-2023-35725HIGHD-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-1851HIGHTenda AC7 SetFirewallCfg formSetFirewallCfg stack-based overflowEPSS 1.1%CVE-2025-15180HIGHTenda WH450 HTTP Request webExcptypemanFilte stack-based overflowEPSS 1.1%CVE-2025-7855HIGHTenda FH451 qossetting fromqossetting stack-based overflowEPSS 1.1%CVE-2025-7532HIGHTenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.1%CVE-2025-15161HIGHTenda WH450 PPTPUserSetting stack-based overflowEPSS 1.1%CVE-2014-125122MEDIUMLinksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password ResetEPSS 1.1%CVE-2011-10032CRITICALSunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57EPSS 1.1%CVE-2023-42790HIGHA stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.EPSS 1.1%CVE-2024-11056HIGHTenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflowEPSS 1.1%CVE-2022-41140HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. AuthentEPSS 1.1%CVE-2023-35746HIGHD-Link DAP-2622 DDP Firmware Upgrade Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35741HIGHD-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35737HIGHD-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35752HIGHD-Link DAP-2622 DDP Set AG Profile Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35740HIGHD-Link DAP-2622 DDP Configuration Backup Server Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35754HIGHD-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35747HIGHD-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%