Weaknesses of type CWE-121

3,824 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2026-5211HIGHD-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflowEPSS 1.2%CVE-2026-4555HIGHD-Link DIR-513 boa formEasySetTimezone memory corruptionEPSS 1.2%CVE-2026-5024HIGHD-Link DIR-513 formSetEmail stack-based overflowEPSS 1.2%CVE-2026-5213HIGHD-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflowEPSS 1.2%CVE-2024-10194HIGHWAVLINK WN530H4/WN530HG4/WN572HG3 Front-End Authentication Page login.cgi Goto_chidx stack-based overflowEPSS 1.2%CVE-2024-10661HIGHTenda AC15 SetDlnaCfg stack-based overflowEPSS 1.2%CVE-2023-0853CRITICALBuffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may alloEPSS 1.2%CVE-2024-24963CRITICALA stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-55EPSS 1.2%CVE-2024-24962CRITICALA stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-55EPSS 1.2%CVE-2026-5212HIGHD-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflowEPSS 1.2%CVE-2024-28899HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.2%CVE-2024-2856HIGHTenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflowEPSS 1.2%CVE-2025-4354HIGHTenda DAP-1520 storage check_dws_cookie stack-based overflowEPSS 1.2%CVE-2025-0848HIGHTenda A18 HTTP POST Request SetCmdlineRun stack-based overflowEPSS 1.2%CVE-2024-6962HIGHTenda O3 formQosSet stack-based overflowEPSS 1.2%CVE-2021-21540MEDIUMDell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentiallyEPSS 1.2%CVE-2023-51628HIGHD-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-32136HIGHD-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-51627HIGHD-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.2%CVE-2021-22666—Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing aEPSS 1.2%