Weaknesses of type CWE-121

3,819 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-22457CRITICALA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTAEPSS 100.0%KEVCVE-2025-0282CRITICALA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti NeuEPSS 100.0%KEVCVE-2021-20038CRITICALA Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticEPSS 99.9%KEVCVE-2009-0927HIGHStack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to eEPSS 96.6%KEVCVE-2020-10924HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rEPSS 87.3%CVE-2022-20705CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 80.0%CVE-2017-13089HIGHGNU Wget: stack overflow in HTTP protocol handlingEPSS 79.9%CVE-2026-41089CRITICALWindows Netlogon Remote Code Execution VulnerabilityEPSS 79.6%CVE-2008-0015HIGHStack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequesEPSS 76.7%KEVCVE-2022-22274—A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of ServEPSS 75.5%CVE-2022-20707CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 75.3%CVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2022-35690CRITICALAdobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 72.2%CVE-2014-0783—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 67.6%CVE-2021-33549HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCEEPSS 66.2%CVE-2016-6563—D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login actionEPSS 65.2%CVE-2018-10594—Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, EEPSS 62.8%CVE-2023-31419MEDIUMElasticsearch StackOverflow vulnerabilityEPSS 61.7%CVE-2014-2364—Advantech WebAccess Stack-Based Buffer OverflowEPSS 61.4%CVE-2019-6553—A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLiEPSS 60.1%