Weaknesses of type CWE-121

3,841 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-28027HIGHTOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 wasEPSS 0.4%CVE-2025-28033HIGHTOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000REPSS 0.4%CVE-2025-28026HIGHTOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 werEPSS 0.4%CVE-2023-34302HIGHAshlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-53621HIGHA buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allows attackers to causeEPSS 0.4%CVE-2023-35710HIGHAshlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-57215HIGHTenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.EPSS 0.4%CVE-2024-28550MEDIUMTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function.EPSS 0.4%CVE-2024-32315MEDIUMTenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.EPSS 0.4%CVE-2023-0770HIGHStack-based Buffer Overflow in gpac/gpacEPSS 0.4%CVE-2026-3439MEDIUMA post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewallEPSS 0.4%CVE-2023-51367MEDIUMQTS, QuTS heroEPSS 0.4%CVE-2023-50809HIGHIn certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly validate an informatEPSS 0.4%CVE-2023-50235HIGHHancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-70304HIGHA buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafEPSS 0.4%CVE-2026-18303HIGHGIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-53296LOWDell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high prEPSS 0.4%CVE-2025-5827HIGHAutel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2019-25363HIGHWMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of ServiceEPSS 0.4%CVE-2024-56468HIGHIBM InfoSphere Data Replication VSAM for z/OS Remote Source denial of serviceEPSS 0.4%