Falhas do tipo CWE-121

3.826 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2025-9046HIGHTenda AC20 setMacFilterCfg sub_46A2AC stack-based overflowEPSS 0.8%CVE-2021-34861HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routerEPSS 0.8%CVE-2026-67866HIGHBuffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_EPSS 0.8%CVE-2025-13190HIGHD-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflowEPSS 0.8%CVE-2026-48863HIGHLibsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceEPSS 0.8%CVE-2026-62706HIGHMicrosoft Windows Media Foundation Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69686HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69759HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69461HIGHWindows NTFS Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-78504HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-62824HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69722HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-73006HIGHDirectWrite Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-7549HIGHTenda FH1201 L7Prot frmL7ProtForm stack-based overflowEPSS 0.8%CVE-2025-7418HIGHTenda O3V2 httpd setPing fromPingResultGet stack-based overflowEPSS 0.8%CVE-2025-7423HIGHTenda O3V2 httpd setWrlFilterList formWifiMacFilterSet stack-based overflowEPSS 0.8%CVE-2025-7417HIGHTenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflowEPSS 0.8%CVE-2025-7421HIGHTenda O3V2 httpd operateMacFilter fromMacFilterModify stack-based overflowEPSS 0.8%CVE-2025-7548HIGHTenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 0.8%CVE-2025-7419HIGHTenda O3V2 httpd setRateTest fromSpeedTestSet stack-based overflowEPSS 0.8%