CWE-121 栈缓冲区溢出 类弱点 2980 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-121 栈缓冲区溢出属于内存安全漏洞，指程序向栈上分配的局部变量或函数参数写入超出其容量的数据。攻击者通常利用此缺陷覆盖栈上的返回地址或关键数据，从而劫持控制流并执行任意代码。开发者应避免使用不安全的字符串处理函数，改用边界检查机制，启用编译器保护如栈金丝雀和 ASLR，并严格验证输入长度，以从根本上消除溢出风险。
#define BUFSIZE 256 int main(int argc, char **argv) { char buf[BUFSIZE]; strcpy(buf, argv[1]); }void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-16234 | patek WinProladder Version 安全漏洞 — PLC WinProladder | 7.8 | - | 2020-09-30 |
| CVE-2020-14393 | Gentoo 缓冲区错误漏洞 — perl-dbi | 7.1 | - | 2020-09-16 |
| CVE-2020-9725 | Adobe Framemaker 缓冲区错误漏洞 — FrameMaker | 7.8 | High | 2020-09-10 |
| CVE-2020-2042 | Palo Alto Networks PAN-OS 缓冲区错误漏洞 — PAN-OS | 7.2 | High | 2020-09-09 |
| CVE-2020-14498 | HMS Networks eCatcher 缓冲区错误漏洞 — eCatcher | 9.6 | Critical | 2020-08-26 |
| CVE-2020-8869 | Foxit Studio Photo 缓冲区错误漏洞 — Studio Photo | 8.8 | - | 2020-08-19 |
| CVE-2020-15635 | NETGEAR R6700 缓冲区错误漏洞 — R6700 | 8.8 | - | 2020-08-19 |
| CVE-2020-15636 | 多款NETGEAR产品缓冲区错误漏洞 — Multiple Routers | 9.8 | - | 2020-08-19 |
| CVE-2020-16221 | Delta Electronics TPEditor 缓冲区错误漏洞 — Delta Electronics TPEditor | 7.8 | - | 2020-08-06 |
| CVE-2020-16215 | Advantech WebAccess HMI Designer 输入验证错误漏洞 — Advantech WebAccess HMI Designer | 7.8 | - | 2020-08-06 |
| CVE-2020-16199 | Delta Electronics CNCSoft ScreenEditor 缓冲区错误漏洞 — Delta Industrial Automation CNCSoft ScreenEditor | 7.8 | - | 2020-08-04 |
| CVE-2020-15416 | NETGEAR R6700 缓冲区错误漏洞 — R6700 | 8.8 | - | 2020-07-28 |
| CVE-2020-15417 | NETGEAR R6700 缓冲区错误漏洞 — R6700 | 8.8 | - | 2020-07-28 |
| CVE-2020-10924 | NETGEAR R6700 缓冲区错误漏洞 — R6700 | 8.0 | - | 2020-07-28 |
| CVE-2020-14511 | Moxa EDR-G902和EDR-G903 缓冲区错误漏洞 — EDR-G902 and EDR-G903 Series Routers | 9.8 | - | 2020-07-15 |
| CVE-2020-12497 | Phoenix Contact PC Worx和Worx Express 缓冲区错误漏洞 — Automation Worx | 7.8 | High | 2020-07-01 |
| CVE-2020-12498 | Phoenix Contact PC Worx和Worx Express 缓冲区错误漏洞 — Automation Worx | 7.8 | High | 2020-07-01 |
| CVE-2020-4044 | xrdp-sesman service 缓冲区错误漏洞 — xrdp | 7.5 | High | 2020-06-30 |
| CVE-2020-12019 | Advantech WebAccess Node 缓冲区错误漏洞 — WebAccess Node | 9.8 | - | 2020-06-15 |
| CVE-2020-2027 | Palo Alto Networks PAN-OS 缓冲区错误漏洞 — PAN-OS | 7.2 | High | 2020-06-10 |
| CVE-2020-2006 | Palo Alto Networks PAN-OS管理服务器组件缓冲区错误漏洞 — PAN-OS | 7.2 | High | 2020-05-13 |
| CVE-2020-12002 | Advantech WebAccess Node 缓冲区错误漏洞 — Advantech WebAccess Node | 9.8 | - | 2020-05-08 |
| CVE-2019-5621 | ABBS Software Audio Media Player 缓冲区错误漏洞 — Audio Media Player | 7.8 | - | 2020-04-29 |
| CVE-2019-5618 | A-PDF WAV to MP3 缓冲区错误漏洞 — WAV to MP3 | 7.8 | - | 2020-04-29 |
| CVE-2019-5619 | AASync 缓冲区错误漏洞 — AASync | 9.8 | - | 2020-04-29 |
| CVE-2020-6996 | Triangle MicroWorks DNP3 Outstation Libraries 缓冲区错误漏洞 — Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01 | 9.8 | - | 2020-04-15 |
| CVE-2020-10615 | Triangle MicroWorks SCADA Data Gateway 缓冲区错误漏洞 — Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 | 7.5 | - | 2020-04-15 |
| CVE-2020-10639 | Eaton HMiSoft VU3 缓冲区错误漏洞 — Eaton HMiSoft VU3 (HMIVU3 runtime not impacted) | 7.8 | - | 2020-04-15 |
| CVE-2020-1990 | Palo Alto Networks PAN-OS 缓冲区错误漏洞 — PAN-OS | 7.2 | High | 2020-04-08 |
| CVE-2020-5735 | Amcrest IPM-721S 缓冲区错误漏洞 — Amcrest | 8.8 | - | 2020-04-08 |
CWE-121（栈缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 2980 条 CVE 漏洞。