Weaknesses of type CWE-121

3,819 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-0930MEDIUMTenda AC10U fromSetWirelessRepeat stack-based overflowEPSS 15.2%CVE-2024-26305CRITICALThere is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendinEPSS 15.2%CVE-2021-32941CRITICALAnnke Network Video Recorder - Stack-based Buffer OverflowEPSS 14.9%CVE-2024-4236HIGHTenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflowEPSS 14.9%CVE-2022-20708CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 14.9%KEVCVE-2020-12497HIGHPhoenix Contact Automation Worx <= 1.87: stack-based overflowEPSS 14.7%CVE-2018-14829—Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a maEPSS 14.6%CVE-2024-33512CRITICALThere is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remEPSS 14.6%CVE-2024-33511CRITICALThere is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code executEPSS 14.6%CVE-2017-5177—A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability hasEPSS 14.4%CVE-2025-3538HIGHD-Link DI-8100 jhttpd auth.asp auth_asp stack-based overflowEPSS 13.2%CVE-2023-4249HIGHZavio IP Camera Stack-Based Buffer OverflowEPSS 12.9%CVE-2019-3822HIGHlibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3EPSS 12.9%CVE-2024-53703HIGHA vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web servEPSS 12.6%CVE-2024-36258CRITICALA stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210EPSS 12.4%CVE-2020-16243—Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially EPSS 12.4%CVE-2023-43239HIGHD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC.EPSS 12.2%CVE-2023-43237HIGHD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC.EPSS 12.2%CVE-2025-5527HIGHTenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflowEPSS 11.9%CVE-2025-3820HIGHTenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflowEPSS 11.8%