Weaknesses of type CWE-121

3,824 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2024-11048HIGHD-Link DI-8003 dbsrv.asp dbsrv_asp stack-based overflowEPSS 1.2%CVE-2022-25996HIGHA stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A sEPSS 1.2%CVE-2012-10053CRITICALSimple Web Server Connection Header Buffer OverflowEPSS 1.2%CVE-2023-49236CRITICALA stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occuEPSS 1.2%CVE-2024-27657HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability allows attackers toEPSS 1.2%CVE-2024-6964HIGHTenda O3 fromDhcpSetSer stack-based overflowEPSS 1.2%CVE-2024-10282HIGHTenda RX9/RX9 Pro SetVirtualServerCfg sub_42EA38 stack-based overflowEPSS 1.2%CVE-2024-47607HIGHGHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_headerEPSS 1.2%CVE-2024-8231HIGHTenda O6 setPortForward fromVirtualSet stack-based overflowEPSS 1.2%CVE-2025-6371HIGHD-Link DIR-619L formSetEnableWizard stack-based overflowEPSS 1.2%CVE-2025-6369HIGHD-Link DIR-619L formdumpeasysetup stack-based overflowEPSS 1.2%CVE-2025-6372HIGHD-Link DIR-619L formSetWizard1 stack-based overflowEPSS 1.2%CVE-2023-24345HIGHD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcppluEPSS 1.2%CVE-2025-6367HIGHD-Link DIR-619L formSetDomainFilter stack-based overflowEPSS 1.2%CVE-2025-6374HIGHD-Link DIR-619L formSetACLFilter stack-based overflowEPSS 1.2%CVE-2023-24346HIGHD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at /goform/formEasySetEPSS 1.2%CVE-2023-24348CRITICALD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter.EPSS 1.2%CVE-2026-2958HIGHD-Link DWR-M960 formWsc sub_457C5C stack-based overflowEPSS 1.2%CVE-2026-2925HIGHD-Link DWR-M960 Bridge VLAN Configuration Endpoint formBridgeVlan sub_42B5A0 stack-based overflowEPSS 1.2%CVE-2026-2926HIGHD-Link DWR-M960 LTE Configuration Endpoint formLteSetup sub_4237AC stack-based overflowEPSS 1.2%