Falhas do tipo CWE-121

3.825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2026-6137HIGHTenda F451 AdvSetWan fromAdvSetWan stack-based overflowEPSS 0.9%CVE-2026-5990HIGHTenda F451 SafeEmailFilter fromSafeEmailFilter stack-based overflowEPSS 0.9%CVE-2026-6133HIGHTenda F451 SafeUrlFilter fromSafeUrlFilter stack-based overflowEPSS 0.9%CVE-2026-5988HIGHTenda F451 AdvSetWrlsafeset formWrlsafeset stack-based overflowEPSS 0.9%CVE-2026-6136HIGHTenda F451 L7Im frmL7ImForm stack-based overflowEPSS 0.9%CVE-2026-57879CRITICALGV-LPC2011/LPC2211 - unauthorized buffer overflow via AuthMode/AuthValue path (ssvr)EPSS 0.9%CVE-2022-22178HIGHJunos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is receivedEPSS 0.9%CVE-2026-57880CRITICALGV-LPC2011/LPC2211 - unauthorized buffer overflow via RTSP Digest username (ssvr)EPSS 0.9%CVE-2025-12260HIGHTOTOLINK A3300R POST Parameter cstecgi.cgi setSyslogCfg stack-based overflowEPSS 0.9%CVE-2025-12258HIGHTOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflowEPSS 0.9%CVE-2024-23938HIGHSilicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-12259HIGHTOTOLINK A3300R POST Parameter cstecgi.cgi setScheduleCfg stack-based overflowEPSS 0.9%CVE-2026-5036HIGHTenda 4G06 Endpoint DhcpListClient fromDhcpListClient stack-based overflowEPSS 0.9%CVE-2022-33871MEDIUMA stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier maEPSS 0.9%CVE-2026-61548HIGHRsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured dataEPSS 0.9%CVE-2026-37539CRITICALBuffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in functionEPSS 0.9%CVE-2026-25823CRITICALHMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 haEPSS 0.9%CVE-2025-26507MEDIUMCertain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of PrivilegeEPSS 0.9%CVE-2024-34195HIGHTOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling EPSS 0.9%CVE-2024-43689HIGHStack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitraryEPSS 0.9%