Weaknesses of type CWE-121

3,847 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-34579HIGHFuji Electric Alpha5 SMART Stack-Based Buffer OverflowEPSS 0.3%CVE-2026-69277HIGHMicrosoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-5056HIGHGStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-5829MEDIUMAutel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-30289HIGHAdobe FrameMaker XLS File Parsing Buffer OverflowEPSS 0.3%CVE-2025-69195HIGHWget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urlsEPSS 0.3%CVE-2024-13045HIGHAshlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-22319MEDIUMStack-Based Buffer Overflow in File Install Parameter HandlingEPSS 0.3%CVE-2024-9726HIGHTrimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-28032HIGHTOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000REPSS 0.3%CVE-2026-22318MEDIUMStack-Based Buffer Overflow in File Transfer Parameter HandlingEPSS 0.3%CVE-2026-41429HIGHImproper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruptionEPSS 0.3%CVE-2026-54502MEDIUMOj: Stack Buffer Overflow in Oj.dump via Large IndentEPSS 0.3%CVE-2023-50234HIGHHancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-47971HIGHMedia Encoder | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-27267HIGHIllustrator | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-48389HIGHDNG SDK | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-34702HIGHInDesign Desktop | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-48417HIGHSubstance3D - Sampler | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-47959HIGHAcrobat Reader | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%