Weaknesses of type CWE-121

3,824 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2026-2884HIGHD-Link DWR-M960 WAN Interface Setting formWanConfigSetup sub_41914C stack-based overflowEPSS 1.2%CVE-2026-2882HIGHD-Link DWR-M960 formDosCfg sub_46385C stack-based overflowEPSS 1.2%CVE-2026-2959HIGHD-Link DWR-M960 formNewSchedule sub_44E0F8 stack-based overflowEPSS 1.2%CVE-2026-2929HIGHD-Link DWR-M960 Wireless Access Control Endpoint formWlAc sub_453140 stack-based overflowEPSS 1.2%CVE-2026-2961HIGHD-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflowEPSS 1.2%CVE-2026-2958HIGHD-Link DWR-M960 formWsc sub_457C5C stack-based overflowEPSS 1.2%CVE-2026-2856HIGHD-Link DWR-M960 Filter Configuration Endpoint formFilter sub_424AFC stack-based overflowEPSS 1.2%CVE-2026-2883HIGHD-Link DWR-M960 formIpQoS sub_427D74 stack-based overflowEPSS 1.2%CVE-2026-2885HIGHD-Link DWR-M960 formIpv6Setup sub_469104 stack-based overflowEPSS 1.2%CVE-2026-2927HIGHD-Link DWR-M960 Operation Mode Configuration Endpoint formOpMode sub_462590 stack-based overflowEPSS 1.2%CVE-2026-2960HIGHD-Link DWR-M960 formDhcpv6s sub_468D64 stack-based overflowEPSS 1.2%CVE-2026-2857HIGHD-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub_423E00 stack-based overflowEPSS 1.2%CVE-2026-2855HIGHD-Link DWR-M960 DDNS Settings formDdns sub_4648F0 stack-based overflowEPSS 1.2%CVE-2026-2853HIGHD-Link DWR-M960 System Log Configuration Endpoint formSysLog sub_462E14 stack-based overflowEPSS 1.2%CVE-2026-2962HIGHD-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub_460F30 stack-based overflowEPSS 1.2%CVE-2026-2925HIGHD-Link DWR-M960 Bridge VLAN Configuration Endpoint formBridgeVlan sub_42B5A0 stack-based overflowEPSS 1.2%CVE-2024-34087CRITICALAn SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers with access to the Web Terminal to achieve rEPSS 1.2%CVE-2025-6616HIGHD-Link DIR-619L formSetWAN_Wizard51 stack-based overflowEPSS 1.2%CVE-2025-55763HIGHBuffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a craEPSS 1.2%CVE-2024-31470CRITICALThere is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthentiEPSS 1.2%