Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2021-1573HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilityEPSS 1.3%CVE-2024-3874HIGHTenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflowEPSS 1.3%CVE-2024-2581HIGHTenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflowEPSS 1.3%CVE-2024-0542HIGHTenda W9 httpd formWifiMacFilterGet stack-based overflowEPSS 1.3%CVE-2024-0541HIGHTenda W9 httpd formAddSysLogRule stack-based overflowEPSS 1.3%CVE-2024-0537HIGHTenda W9 httpd setWrlBasicInfo stack-based overflowEPSS 1.3%CVE-2024-10662HIGHTenda AC15 SetOnlineDevName formSetDeviceName stack-based overflowEPSS 1.3%CVE-2024-0539HIGHTenda W9 httpd formQosManage_user stack-based overflowEPSS 1.3%CVE-2023-7219HIGHTotolink N350RT cstecgi.cgi loginAuth stack-based overflowEPSS 1.3%CVE-2025-6292HIGHD-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflowEPSS 1.3%CVE-2020-16234—FATEK Automation PLC WinProladderEPSS 1.3%CVE-2025-6291HIGHD-Link DIR-825 HTTP POST Request do_file stack-based overflowEPSS 1.3%CVE-2024-2850HIGHTenda AC15 saveParentControlInfo stack-based overflowEPSS 1.3%CVE-2024-2855HIGHTenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflowEPSS 1.3%CVE-2024-2852HIGHTenda AC15 saveParentControlInfo stack-based overflowEPSS 1.3%CVE-2024-8229HIGHTenda O6 operateMacFilter frommacFilterModify stack-based overflowEPSS 1.3%CVE-2024-10434HIGHTenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflowEPSS 1.3%CVE-2019-13537—The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerabiEPSS 1.3%CVE-2017-20242CRITICALKeysight IxChariot Endpoint stack-based buffer overflowEPSS 1.3%CVE-2024-36435CRITICALAn issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules). An unautEPSS 1.3%