Falhas do tipo CWE-121

3.831 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2025-70230CRITICALStack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.EPSS 0.8%CVE-2023-37322HIGHD-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37312HIGHD-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-27369HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-37313HIGHD-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37311HIGHD-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37326HIGHD-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37315HIGHD-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37316HIGHD-Link DAP-2622 DDP Set IPv6 Address Default Gateway Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37320HIGHD-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37318HIGHD-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37314HIGHD-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-27368HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-37321HIGHD-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37317HIGHD-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37319HIGHD-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-14993HIGHTenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflowEPSS 0.8%CVE-2024-30627HIGHTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from saveParentControlInfo function.EPSS 0.8%CVE-2022-43764CRITICALBuffer overflow when changing configuration on Tbase ServerEPSS 0.8%CVE-2024-5507HIGHLuxion KeyShot Viewer KSP File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%