Falhas do tipo CWE-121

3.827 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2026-4167HIGHBelkin F9K1122 formReboot stack-based overflowEPSS 0.8%CVE-2026-9425HIGHEdimax EW-7438RPn formWlanMP stack-based overflowEPSS 0.8%CVE-2026-9480HIGHEdimax EW-7438RPn formrefresh stack-based overflowEPSS 0.8%CVE-2026-9459HIGHEdimax EW-7438RPn formConnectionSetting stack-based overflowEPSS 0.8%CVE-2026-9463HIGHEdimax EW-7438RPn formLicence stack-based overflowEPSS 0.8%CVE-2026-19959CRITICALEdimax EW-7478APC formWanTcpipSetup stack-based overflowEPSS 0.8%CVE-2026-13563HIGHEdimax EW-7478APC POST Request formL2TPSetup stack-based overflowEPSS 0.8%CVE-2026-9427HIGHEdimax EW-7438RPn webs formWlSiteSurvey stack-based overflowEPSS 0.8%CVE-2026-9344HIGHEdimax EW-7438RPn webs formWpsStart stack-based overflowEPSS 0.8%CVE-2026-9481HIGHEdimax EW-7438RPn formStats stack-based overflowEPSS 0.8%CVE-2026-9479HIGHEdimax EW-7438RPn formLogout stack-based overflowEPSS 0.8%CVE-2020-10639—Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A EPSS 0.8%CVE-2026-8234HIGHEFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflowEPSS 0.8%CVE-2026-18897HIGHUTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflowEPSS 0.8%CVE-2026-18895HIGHUTT HiPER 1250GW APSecurity_5g strcpy stack-based overflowEPSS 0.8%CVE-2024-12803HIGHA post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potenEPSS 0.8%CVE-2026-13564HIGHEdimax EW-7478APC POST Request formPPPoESetup stack-based overflowEPSS 0.8%CVE-2026-18898HIGHUTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflowEPSS 0.8%CVE-2024-5242HIGHTP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-39280—SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewEPSS 0.8%