Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-2487HIGHTenda AC18 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.6%CVE-2022-23804HIGHA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of EPSS 1.6%CVE-2024-4065HIGHTenda AC8 SetRebootTimer formSetRebootTimer stack-based overflowEPSS 1.6%CVE-2022-23803HIGHA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of EPSS 1.6%CVE-2024-3875HIGHTenda F1202 Natlimit fromNatlimit stack-based overflowEPSS 1.6%CVE-2018-14800—Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boEPSS 1.6%CVE-2025-34127CRITICALAchat v0.150 SEH Buffer Overflow via UDPEPSS 1.6%CVE-2024-28928HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-5293HIGHD-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-2805HIGHTenda AC15 SetSpeedWan formSetSpeedWan stack-based overflowEPSS 1.6%CVE-2026-4529HIGHD-Link DHP-1320 SOAP redirect_count_down_page stack-based overflowEPSS 1.6%CVE-2025-1539HIGHD-Link DAP-1320 storagein.pd-XXXXXX replace_special_char stack-based overflowEPSS 1.6%CVE-2018-5410—Dokan file system driver contains a stack-based buffer overflowEPSS 1.6%CVE-2024-45695CRITICALD-Link WiFi router - Stack-based Buffer OverflowEPSS 1.6%CVE-2024-3007HIGHTenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.6%CVE-2024-2894HIGHTenda AC7 SetNetControlList formSetQosBand stack-based overflowEPSS 1.6%CVE-2024-2987HIGHTenda FH1202 GetParentControlInfo stack-based overflowEPSS 1.6%CVE-2020-26993—A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applicatiEPSS 1.6%CVE-2020-26992—A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applicatiEPSS 1.6%CVE-2025-10432CRITICALTenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflowEPSS 1.6%