Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-4250HIGHTenda i21 wifiSSIDset formwrlSSIDset stack-based overflowEPSS 1.3%CVE-2024-4114HIGHTenda TX9 PowerSaveSet sub_42C014 stack-based overflowEPSS 1.3%CVE-2024-4245HIGHTenda i21 formQosManageDouble_user stack-based overflowEPSS 1.3%CVE-2024-4246HIGHTenda i21 formQosManageDouble_auto stack-based overflowEPSS 1.3%CVE-2024-4251HIGHTenda i21 DhcpSetSe fromDhcpSetSer stack-based overflowEPSS 1.3%CVE-2024-4249HIGHTenda i21 wifiSSIDget formwrlSSIDget stack-based overflowEPSS 1.3%CVE-2024-4248HIGHTenda i21 formQosManage_user stack-based overflowEPSS 1.3%CVE-2020-6996—Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are aEPSS 1.3%CVE-2024-4243HIGHTenda W9 wifiSSIDset formwrlSSIDset stack-based overflowEPSS 1.3%CVE-2024-4244HIGHTenda W9 DhcpSetSer fromDhcpSetSer stack-based overflowEPSS 1.3%CVE-2024-4242HIGHTenda W9 wifiSSIDget formwrlSSIDget stack-based overflowEPSS 1.3%CVE-2024-4241HIGHTenda W9 formQosManageDouble_auto stack-based overflowEPSS 1.3%CVE-2018-14792—WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.EPSS 1.3%CVE-2026-26736HIGHTOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIEPSS 1.3%CVE-2023-51635HIGHNETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-76070CRITICALNetis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password ParameterEPSS 1.3%CVE-2024-6963HIGHTenda O3 formexeCommand stack-based overflowEPSS 1.3%CVE-2025-7084HIGHBelkin F9K1122 webs formWpsStart stack-based overflowEPSS 1.3%CVE-2026-26731HIGHTOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsvEPSS 1.3%CVE-2024-0571HIGHTotolink LR1200GB cstecgi.cgi setSmsCfg stack-based overflowEPSS 1.3%