Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-3878HIGHTenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.7%CVE-2024-4170HIGHTenda 4G300 sub_429A30 stack-based overflowEPSS 1.7%CVE-2024-2900HIGHTenda AC7 saveParentControlInfo stack-based overflowEPSS 1.7%CVE-2024-2986HIGHTenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflowEPSS 1.7%CVE-2024-3006HIGHTenda FH1205 fromRouteStatic fromSetRouteStatic stack-based overflowEPSS 1.7%CVE-2024-2891HIGHTenda AC7 QuickIndex formQuickIndex stack-based overflowEPSS 1.7%CVE-2024-3008HIGHTenda FH1205 execCommand formexeCommand stack-based overflowEPSS 1.7%CVE-2024-2899HIGHTenda AC7 WifiExtraSet fromSetWirelessRepeat stack-based overflowEPSS 1.7%CVE-2024-2898HIGHTenda AC7 SetStaticRouteCfg fromSetRouteStatic stack-based overflowEPSS 1.7%CVE-2013-10057HIGHSynactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer OverflowEPSS 1.7%CVE-2024-0534HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2024-0531HIGHTenda A15 Web-based Management Interface setBlackRule stack-based overflowEPSS 1.7%CVE-2022-40149MEDIUMStack Buffer Overflow in JettisonEPSS 1.7%CVE-2024-3909HIGHTenda AC500 execCommand formexeCommand stack-based overflowEPSS 1.7%CVE-2025-7544HIGHTenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflowEPSS 1.7%CVE-2023-4527MEDIUMGlibc: stack read overflow in getaddrinfo in no-aaaa modeEPSS 1.7%CVE-2024-2979HIGHTenda F1203 openSchedWifi setSchedWifi stack-based overflowEPSS 1.7%CVE-2024-2976HIGHTenda F1203 execCommand R7WebsSecurityHandler stack-based overflowEPSS 1.7%CVE-2024-0991HIGHTenda i6 httpd setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-0995HIGHTenda W6 httpd wifiSSIDset formwrlSSIDset stack-based overflowEPSS 1.7%