Falhas do tipo CWE-121

3.825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2021-25667MEDIUMA vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4),EPSS 0.9%CVE-2025-7790HIGHD-Link DI-8100 HTTP Request menu_nat.asp stack-based overflowEPSS 0.9%CVE-2026-49759HIGHStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashEPSS 0.9%CVE-2026-69614HIGHMicrosoft Office Access Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-29164CRITICALHDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causingEPSS 0.9%CVE-2023-41028CRITICALJuplink RX4-1500 Stack-based Buffer Overflow VulnerabilityEPSS 0.9%CVE-2023-27361MEDIUMNETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-9791HIGHTenda AC20 fromAdvSetMacMtuWan stack-based overflowEPSS 0.9%CVE-2026-15693HIGHTenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflowEPSS 0.9%CVE-2026-19822HIGHTenda W20E QoS Edit editQos lstAdd stack-based overflowEPSS 0.9%CVE-2026-19846HIGHTOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflowEPSS 0.9%CVE-2026-19788HIGHTenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflowEPSS 0.9%CVE-2026-76590CRITICALTRENDnet TEW-755AP ssi wan.cgi stack-based overflowEPSS 0.9%CVE-2026-75877CRITICALTRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflowEPSS 0.9%CVE-2026-13517HIGHTenda JD12L WifiBasicSet formWifiBasicSet stack-based overflowEPSS 0.9%CVE-2026-13519HIGHTenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 0.9%CVE-2026-15692HIGHTenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflowEPSS 0.9%CVE-2026-76584CRITICALTRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflowEPSS 0.9%CVE-2026-13518HIGHTenda JD12L addressNat fromAddressNat stack-based overflowEPSS 0.9%CVE-2026-19813HIGHTOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflowEPSS 0.9%