Weaknesses of type CWE-121

3,819 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2021-44703HIGHAdobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code executionEPSS 57.3%CVE-2018-1161—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. AuthentEPSS 57.1%CVE-2014-0782—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 56.8%CVE-2025-40596HIGHA Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of SeEPSS 56.5%CVE-2018-20247—In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree EPSS 54.5%CVE-2023-3959CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 48.8%CVE-2024-26304CRITICALThere is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code executionEPSS 44.0%CVE-2022-35710CRITICALAdobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 42.6%CVE-2023-0656—A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which EPSS 41.3%CVE-2026-2329CRITICALGrandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflowEPSS 40.6%CVE-2025-20352HIGHA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the fEPSS 39.4%KEVCVE-2024-27130HIGHQTS, QuTS heroEPSS 37.5%CVE-2020-5735HIGHAmcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issEPSS 36.2%KEVCVE-2014-0784—Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowEPSS 35.9%CVE-2021-42756CRITICALMultiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and EPSS 35.0%CVE-2026-0826CRITICALPoly Voice – Possible Remote Control of Certain Poly DevicesEPSS 32.2%CVE-2021-21892CRITICALA stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEEPSS 30.4%CVE-2025-32756CRITICALA stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionEPSS 29.8%KEVCVE-2021-36301MEDIUMDell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticatedEPSS 27.7%CVE-2018-5002HIGHAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to aEPSS 25.1%KEV