Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2022-47065HIGHTrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url EPSS 1.1%CVE-2026-30872CRITICALOpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookupEPSS 1.1%CVE-2023-35725HIGHD-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-1851HIGHTenda AC7 SetFirewallCfg formSetFirewallCfg stack-based overflowEPSS 1.1%CVE-2025-15180HIGHTenda WH450 HTTP Request webExcptypemanFilte stack-based overflowEPSS 1.1%CVE-2025-7855HIGHTenda FH451 qossetting fromqossetting stack-based overflowEPSS 1.1%CVE-2025-7532HIGHTenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowEPSS 1.1%CVE-2025-15161HIGHTenda WH450 PPTPUserSetting stack-based overflowEPSS 1.1%CVE-2014-125122MEDIUMLinksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password ResetEPSS 1.1%CVE-2011-10032CRITICALSunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57EPSS 1.1%CVE-2023-42790HIGHA stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.EPSS 1.1%CVE-2024-11056HIGHTenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflowEPSS 1.1%CVE-2022-41140HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. AuthentEPSS 1.1%CVE-2023-35746HIGHD-Link DAP-2622 DDP Firmware Upgrade Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35741HIGHD-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35737HIGHD-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35752HIGHD-Link DAP-2622 DDP Set AG Profile Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35740HIGHD-Link DAP-2622 DDP Configuration Backup Server Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35754HIGHD-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35747HIGHD-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%