目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-121 栈缓冲区溢出 类漏洞列表 2978

CWE-121 栈缓冲区溢出 类弱点 2978 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-121 栈缓冲区溢出属于内存安全漏洞，指程序向栈上分配的局部变量或函数参数写入超出其容量的数据。攻击者通常利用此缺陷覆盖栈上的返回地址或关键数据，从而劫持控制流并执行任意代码。开发者应避免使用不安全的字符串处理函数，改用边界检查机制，启用编译器保护如栈金丝雀和 ASLR，并严格验证输入长度，以从根本上消除溢出风险。

MITRE CWE 官方描述
CWE：CWE-121 基于栈的缓冲区溢出（Stack-based Buffer Overflow） 英文：基于栈的缓冲区溢出（Stack-based Buffer Overflow）条件是指被覆盖的缓冲区分配在栈上（即，它是局部变量或，罕见情况下，是函数的参数）的条件。
常见影响 (3)
Availability Modify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
Integrity, Confidentiality, Availability, Access Control Modify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism
Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy.
Integrity, Confidentiality, Availability, Access Control, Other Modify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism, Other
When the consequence is arbitrary code execution, this can often be used to subvert any other security service.
缓解措施 (5)
Operation, Build and Compilation Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
Architecture and Design Use an abstraction library to abstract away risky APIs. Not a complete solution.
Implementation Implement and perform bounds checking on input.
Implementation Do not use dangerous functions such as gets. Use safer, equivalent functions which check for boundary errors.
Operation, Build and Compilation Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code. Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported…
Effectiveness: Defense in Depth
代码示例 (2)
While buffer overflow examples can be rather complex, it is possible to have very simple, yet still exploitable, stack-based buffer overflows:
#define BUFSIZE 256 int main(int argc, char **argv) { char buf[BUFSIZE]; strcpy(buf, argv[1]); }
Bad · C
This example takes an IP address from a user, verifies that it is well formed and then looks up the hostname and copies it into a buffer.
void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }
Bad · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-90779 SIPp 3.7.7 缓冲区溢出漏洞 — sipp 7.5 High 2026-09-13
CVE-2026-90558 sngrep 1.8.4 栈缓冲区溢出漏洞 — sngrep 9.8 Critical 2026-09-12
CVE-2026-86093 IBM Db2 联邦服务器 远程代码执行漏洞 — Db2 7.5 High 2026-09-10
CVE-2026-15419 Silicon Labs silabser.sys driver 缓冲区错误漏洞 — silabser.sys driver 7.0 High 2026-09-10
CVE-2026-88047 Tesseract ReadNormProtos栈缓冲区溢出漏洞 — tesseract 8.6 High 2026-09-10
CVE-2026-42805 Bosch Sensortec BHI385 SensorAPI 缓冲区错误漏洞 — BHI385 SensorAPI (C Library) 8.4 High 2026-09-10
CVE-2026-42804 BOSCH Sensortec BHI360 SensorAPI 缓冲区错误漏洞 — BHI360_SensorAPI (C-Library) 7.6 High 2026-09-10
CVE-2026-88289 GV-LPC2011 预认证堆栈缓冲区溢出漏洞 — GV-LPC2011/LPC2211 7.5 High 2026-09-10
CVE-2026-88287 GV-LPC2011 系列 ONVIF 探测栈溢出拒绝服务漏洞 — GV-LPC2011/LPC2211 7.5 High 2026-09-10
CVE-2026-88284 GV系列ONVIF设置用户栈溢出致服务中断 — GV-LPC2011/LPC2211 - 4.9 Medium 2026-09-10
CVE-2026-88283 GV-LPC2011/LPC2211 ONVIF重复元素栈溢出拒绝服务 — GV-LPC2011/LPC2211 4.9 Medium 2026-09-10
CVE-2026-88281 GV-LPC2011/LPC2211 远程拒绝服务漏洞 — GV-LPC2011/LPC2211 4.9 Medium 2026-09-10
CVE-2026-88280 GV-LPC2011 用户认证堆栈溢出拒绝服务 — GV-LPC2011/LPC2211 4.9 Medium 2026-09-10
CVE-2026-88279 GV-LPC2011 拒绝服务漏洞 — GV-LPC2011/LPC2211 4.9 Medium 2026-09-10
CVE-2026-88268 LPC2011/2211 SSVR重组栈溢出拒绝服务 — GV-LPCLPC2011/2211 6.5 Medium 2026-09-10
CVE-2026-82079 Nintendo Switch 缓冲区错误漏洞 — Nintendo Switch 7.0 High 2026-09-10
CVE-2026-85384 TP-Link RE210 AC750 缓冲区错误漏洞 — RE210 AC750 8.5 High 2026-09-08
CVE-2026-83990 Microsoft Graphics Component 缓冲区错误漏洞 — Windows 11 version 23H2 7.8 High 2026-09-08
CVE-2026-81953 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High 2026-09-08
CVE-2026-81388 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High 2026-09-08
CVE-2026-81396 Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High 2026-09-08
CVE-2026-73006 Microsoft Graphics Component 缓冲区错误漏洞 — Windows 10 Version 1607 8.8 High 2026-09-08
CVE-2026-69614 Microsoft Office Access 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise 8.8 High 2026-09-08
CVE-2026-69510 Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows 10 Version 1607 8.1 High 2026-09-08
CVE-2026-69910 Microsoft Windows Hyper-V 缓冲区错误漏洞 — Windows 10 Version 1607 9.8 Critical 2026-09-08
CVE-2026-69290 Microsoft Windows Storage Spaces Controller 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High 2026-09-08
CVE-2026-69714 Microsoft Windows Device Association Service 缓冲区错误漏洞 — Windows 10 Version 1607 8.0 High 2026-09-08
CVE-2026-69620 Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows 10 Version 1607 8.1 High 2026-09-08
CVE-2026-69503 Microsoft Windows USB Driver 缓冲区错误漏洞 — Windows 10 Version 1809 8.0 High 2026-09-08
CVE-2026-69508 Microsoft Windows MIDI Service Module 缓冲区错误漏洞 — Windows 11 Version 24H2 7.8 High 2026-09-08

CWE-121（栈缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 2978 条 CVE 漏洞。