Falhas do tipo CWE-121

3.825 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2026-13516HIGHTenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflowEPSS 0.9%CVE-2026-75877CRITICALTRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflowEPSS 0.9%CVE-2026-19789HIGHTenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflowEPSS 0.9%CVE-2026-13517HIGHTenda JD12L WifiBasicSet formWifiBasicSet stack-based overflowEPSS 0.9%CVE-2026-19811HIGHTOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflowEPSS 0.9%CVE-2026-15694HIGHTenda BE12 Pro SetIpBind fromSetIpBind stack-based overflowEPSS 0.9%CVE-2026-19812HIGHTOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflowEPSS 0.9%CVE-2026-19844HIGHTOTOLINK A800R ipv6.so cstecgi.cgi setRadvdCfg stack-based overflowEPSS 0.9%CVE-2026-10063HIGHTRENDnet TEW-432BRP formWPS stack-based overflowEPSS 0.9%CVE-2017-16327HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16266HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16326HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16328HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16294HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16267HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16297HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16324HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16258HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16262HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%CVE-2017-16331HIGHMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarEPSS 0.9%