Falhas do tipo CWE-121

3.820 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2024-7441HIGHVivotek SD9364 httpd read stack-based overflowEPSS 8.1%CVE-2023-38148HIGHInternet Connection Sharing (ICS) Remote Code Execution VulnerabilityEPSS 7.9%CVE-2021-35004HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 relEPSS 7.7%CVE-2021-35003CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 reEPSS 7.7%CVE-2020-27261—Omron CX-OneEPSS 7.6%CVE-2026-10187CRITICALTotolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflowEPSS 7.3%CVE-2017-14854CRITICALA stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects alEPSS 7.3%CVE-2018-17930—A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, which may allow remoteEPSS 7.3%CVE-2022-24049CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systeEPSS 7.2%CVE-2025-2097HIGHTOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflowEPSS 7.2%CVE-2014-125117CRITICALD-Link info.cgi POST Request Stack-Based Buffer Overflow RCEEPSS 7.2%CVE-2021-38402HIGHDelta Electronics DOPSoft 2 Stack-Based Buffer OverflowEPSS 7.1%CVE-2025-5853HIGHTenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowEPSS 7.1%CVE-2015-6490CRITICALStack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remoteEPSS 7.0%CVE-2019-3930—The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1EPSS 7.0%CVE-2025-3693HIGHTenda W12 httpd cgiWifiRadioSet stack-based overflowEPSS 6.9%CVE-2020-17407CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112EPSS 6.8%CVE-2021-36005HIGHAdobe Photoshop PSD File Parsing Stack Overflow VulnerabilityEPSS 6.8%CVE-2023-46223CRITICALAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofEPSS 6.8%CVE-2025-62507HIGHRedis: Bug in XACKDEL may lead to stack overflow and potential RCEEPSS 6.8%