Weaknesses of type CWE-121

3,820 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2018-14802—Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The proEPSS 3.6%CVE-2026-2961HIGHD-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflowEPSS 3.5%CVE-2018-10621—Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger thEPSS 3.5%CVE-2026-2962HIGHD-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub_460F30 stack-based overflowEPSS 3.5%CVE-2020-6989—In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serveEPSS 3.5%CVE-2018-14818—WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflowEPSS 3.5%CVE-2025-1876MEDIUMD-Link DAP-1562 HTTP Header http_request_parse stack-based overflowEPSS 3.5%CVE-2022-2825CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. AuthenticaEPSS 3.4%CVE-2024-47962HIGHStack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2EPSS 3.4%CVE-2025-24922HIGHDell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerabilityEPSS 3.4%CVE-2020-2000HIGHPAN-OS: OS command injection and memory corruption vulnerabilityEPSS 3.4%CVE-2018-10907HIGHIt was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fEPSS 3.4%CVE-2023-28760HIGHTP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the dbEPSS 3.4%CVE-2025-14655HIGHTenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowEPSS 3.3%CVE-2025-14654HIGHTenda AC20 httpd setPptpUserList formSetPPTPUserList stack-based overflowEPSS 3.3%CVE-2025-42599CRITICALActive! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted requEPSS 3.3%KEVCVE-2019-5041CRITICALAn exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0EPSS 3.3%CVE-2025-70219CRITICALStack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot.EPSS 3.3%CVE-2025-15252HIGHTenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overflowEPSS 3.3%CVE-2010-20121CRITICALEasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer OverflowEPSS 3.2%