Weaknesses of type CWE-121

3,848 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2026-32195HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2023-43520HIGHStack-based Buffer Overflow in WLAN HOSTEPSS 0.3%CVE-2023-51745HIGHA vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), TeamcenEPSS 0.3%CVE-2024-55577HIGHStack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially craEPSS 0.3%CVE-2025-7032HIGHRockwell Automation Stack-based Buffer Overflow In Arena® SimulationEPSS 0.3%CVE-2023-1709HIGHDatalogics Library APDFL Stack-based Buffer OverflowEPSS 0.3%CVE-2025-20719HIGHIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eEPSS 0.3%CVE-2022-43295MEDIUMXPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795.EPSS 0.3%CVE-2026-16461MEDIUMRpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formattingEPSS 0.3%CVE-2023-37296HIGHStack-based Buffer OverflowEPSS 0.3%CVE-2019-25332HIGHFTP Commander Pro 8.03 - Local Stack OverflowEPSS 0.3%CVE-2025-21128HIGHSubstance3D - Stager | Stack-based Buffer Overflow (CWE-121)EPSS 0.3%CVE-2026-32708HIGHZenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)EPSS 0.3%CVE-2026-7192CRITICALMultiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network EquipmentEPSS 0.3%CVE-2026-18167HIGHStack-based buffer overflow in TP-Link Archer AX55 v4EPSS 0.3%CVE-2025-55660MEDIUMA stack overflow in the gf_opus_read_length function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of SeEPSS 0.3%CVE-2025-44900MEDIUMIn Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the pEPSS 0.3%CVE-2026-42804HIGHA stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commitEPSS 0.3%CVE-2026-40510LOWOpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.cEPSS 0.3%CVE-2023-48906MEDIUMStack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the char_for_nibbEPSS 0.3%