Weaknesses of type CWE-121

3,824 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-6370HIGHD-Link DIR-619L formWlanGuestSetup stack-based overflowEPSS 1.2%CVE-2025-6511HIGHNetgear EX6150 sub_410090 stack-based overflowEPSS 1.2%CVE-2025-5799HIGHTenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflowEPSS 1.2%CVE-2025-5798HIGHTenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflowEPSS 1.2%CVE-2020-25857—The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) EPSS 1.2%CVE-2025-5600CRITICALTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.2%CVE-2023-39435HIGHZavio IP Camera Stack-Based Buffer OverflowEPSS 1.2%CVE-2023-24347HIGHD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcppluEPSS 1.2%CVE-2026-33250HIGHCrash when receiving specially-crafted packetsEPSS 1.2%CVE-2025-27481HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.2%CVE-2026-94184HIGHFetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)EPSS 1.2%CVE-2026-1329HIGHTenda AX1803 WifiGuestSet fromGetWifiGuestBasic stack-based overflowEPSS 1.2%CVE-2024-27655HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerability allows attackers toEPSS 1.2%CVE-2024-8225HIGHTenda G3 SetSysTimeCfg formSetSysTime stack-based overflowEPSS 1.2%CVE-2024-8224HIGHTenda G3 setDebugCfg formSetDebugCfg stack-based overflowEPSS 1.2%CVE-2024-8227HIGHTenda O1 DhcpSetSer fromDhcpSetSer stack-based overflowEPSS 1.2%CVE-2019-11931—A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was preseEPSS 1.2%CVE-2020-1921—In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within tEPSS 1.2%CVE-2024-11047HIGHD-Link DI-8003 upgrade_filter.asp upgrade_filter_asp stack-based overflowEPSS 1.2%CVE-2021-22673—The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which EPSS 1.2%