Weaknesses of type CWE-121

3,820 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-39605HIGHDelta Electronics DIAScreen Stack-based Buffer OverflowEPSS 2.9%CVE-2020-7007—In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go outEPSS 2.9%CVE-2021-1337HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2022-42339HIGHAdobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code ExecutionEPSS 2.9%CVE-2025-5228HIGHD-Link DI-8100 jhttpd login.cgi httpd_get_parm stack-based overflowEPSS 2.9%CVE-2021-21889CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). EPSS 2.8%CVE-2020-28384—A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). AffectedEPSS 2.8%CVE-2020-26989—A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (AEPSS 2.8%CVE-2021-33546HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCEEPSS 2.8%CVE-2021-33545HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCEEPSS 2.8%CVE-2021-33547HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCEEPSS 2.8%CVE-2025-10925HIGHGIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 2.8%CVE-2020-7845HIGHJiransecurity Spamsniper Stack-based Buffer Overflow VulnerabilityEPSS 2.8%CVE-2019-18236—Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a sEPSS 2.8%CVE-2021-32976CRITICALMoxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer OverflowEPSS 2.8%CVE-2025-6121CRITICALD-Link DIR-632 HTTP POST Request get_pure_content stack-based overflowEPSS 2.8%CVE-2018-7494—WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be readEPSS 2.8%CVE-2017-13999—A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vuEPSS 2.8%CVE-2010-3872HIGHHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.cEPSS 2.8%CVE-2019-18257—In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfeEPSS 2.8%