Weaknesses of type CWE-121

4,132 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2023-31419MEDIUMElasticsearch StackOverflow vulnerabilityEPSS 61.1%CVE-2021-44703HIGHAdobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code executionEPSS 57.3%CVE-2014-0782—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 56.7%CVE-2018-20247—In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree EPSS 54.5%CVE-2023-3959CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 48.8%CVE-2025-40596HIGHA Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of SeEPSS 45.3%CVE-2014-9163HIGHStack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.EPSS 44.9%KEVCVE-2024-26304CRITICALThere is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code executionEPSS 44.3%CVE-2022-35710CRITICALAdobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 43.5%CVE-2026-2329CRITICALGrandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflowEPSS 41.7%CVE-2023-0656—A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which EPSS 41.3%CVE-2025-20352HIGHA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the fEPSS 40.6%KEVCVE-2024-27130HIGHQTS, QuTS heroEPSS 37.5%CVE-2020-5735HIGHAmcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issEPSS 36.2%KEVCVE-2014-0784—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 35.9%CVE-2021-42756CRITICALMultiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and EPSS 35.2%CVE-2026-0826CRITICALPoly Voice – Possible Remote Control of Certain Poly DevicesEPSS 32.2%CVE-2025-32756CRITICALA stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionEPSS 30.9%KEVCVE-2021-21892CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEEPSS 30.4%CVE-2021-36301MEDIUMDell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticatedEPSS 27.7%