Weaknesses of type CWE-121

4,132 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2021-1335HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2021-1332HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2021-1338HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2021-1328HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2021-1212HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2021-1325HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.9%CVE-2022-42339HIGHAdobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code ExecutionEPSS 2.9%CVE-2012-10023MEDIUMFreeFloat FTP Server USER Command Buffer OverflowEPSS 2.8%CVE-2021-33545HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCEEPSS 2.8%CVE-2021-33547HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCEEPSS 2.8%CVE-2021-33546HIGHUDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCEEPSS 2.8%CVE-2020-7845HIGHJiransecurity Spamsniper Stack-based Buffer Overflow VulnerabilityEPSS 2.8%CVE-2019-18236—Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a sEPSS 2.8%CVE-2021-32976CRITICALMoxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer OverflowEPSS 2.8%CVE-2025-6121CRITICALD-Link DIR-632 HTTP POST Request get_pure_content stack-based overflowEPSS 2.8%CVE-2025-54916HIGHWindows NTFS Remote Code Execution VulnerabilityEPSS 2.8%CVE-2010-3872HIGHHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.cEPSS 2.8%CVE-2017-13999—A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vuEPSS 2.8%CVE-2019-18257—In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfeEPSS 2.8%CVE-2021-31438HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interacEPSS 2.8%