Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-2704HIGHTenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflowEPSS 1.5%CVE-2024-2763HIGHTenda AC10U setcfm formSetCfm stack-based overflowEPSS 1.5%CVE-2024-2811HIGHTenda AC15 WifiWpsStart formWifiWpsStart stack-based overflowEPSS 1.5%CVE-2018-6339—When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An offEPSS 1.5%CVE-2023-34095CRITICALcpdb-libs vulnerable to buffer overflows via scanfEPSS 1.5%CVE-2023-50186HIGHGStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.5%CVE-2024-2488HIGHTenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflowEPSS 1.5%CVE-2020-27221—In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natEPSS 1.5%CVE-2020-16209CRITICALFieldcomm Group HART-IP and hipserver - Stack-based Buffer OverflowEPSS 1.5%CVE-2021-34978HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouEPSS 1.5%CVE-2017-15101HIGHA missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could caEPSS 1.5%CVE-2025-3710CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2025-3711CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2025-3714CRITICALATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer OverflowEPSS 1.5%CVE-2013-2597HIGHStack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used EPSS 1.5%KEVCVE-2023-25081HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25124HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2022-2471CRITICALStack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection componentEPSS 1.5%CVE-2023-7220CRITICALTotolink NR1800X cstecgi.cgi loginAuth stack-based overflowEPSS 1.5%CVE-2022-0408HIGHStack-based Buffer Overflow in vim/vimEPSS 1.5%