Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2023-25083HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25094HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25101HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2023-25084HIGHMultiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patEPSS 1.5%CVE-2024-3881HIGHTenda W30E frmL7ProtForm frmL7PlotForm stack-based overflowEPSS 1.5%CVE-2025-35003CRITICALApache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.EPSS 1.5%CVE-2024-4165HIGHTenda G3 modifyDhcpRule stack-based overflowEPSS 1.5%CVE-2024-4164HIGHTenda G3 ModifyPppAuthWhiteMac formModifyPppAuthWhiteMac stack-based overflowEPSS 1.5%CVE-2026-5614HIGHBelkin F9K1015 formSetPassword stack-based overflowEPSS 1.5%CVE-2022-2970CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.5%CVE-2021-46699—A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack based buffer overflEPSS 1.5%CVE-2024-4252HIGHTenda i22 formSetUrlFilterRule stack-based overflowEPSS 1.5%CVE-2024-4497HIGHTenda i21 formexeCommand stack-based overflowEPSS 1.5%CVE-2024-4291HIGHTenda A301 setBlackRule formAddMacfilterRule stack-based overflowEPSS 1.5%CVE-2024-4491HIGHTenda i21 formGetDiagnoseInfo stack-based overflowEPSS 1.5%CVE-2024-4492HIGHTenda i21 setStaOffline formOfflineSet stack-based overflowEPSS 1.5%CVE-2024-4247HIGHTenda i21 formQosManage_auto stack-based overflowEPSS 1.5%CVE-2024-4113HIGHTenda TX9 SetSysTimeCfg sub_42D4DC stack-based overflowEPSS 1.5%CVE-2024-4111HIGHTenda TX9 SetLEDCfg sub_42BD7C stack-based overflowEPSS 1.5%CVE-2024-4496HIGHTenda i21 formWifiMacFilterSet stack-based overflowEPSS 1.5%