Weaknesses of type CWE-121

4,132 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2019-17146HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication EPSS 9.5%CVE-2015-6490CRITICALStack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remoteEPSS 9.5%CVE-2020-16199—Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulnerabilities may be exEPSS 9.5%CVE-2018-10636—CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could causEPSS 9.4%CVE-2022-41966HIGHXStream Denial of Service via stack overflow EPSS 9.3%CVE-2020-10881CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1EPSS 9.3%CVE-2022-21137HIGHOmron CX-OneEPSS 9.3%CVE-2014-125117CRITICALD-Link info.cgi POST Request Stack-Based Buffer Overflow RCEEPSS 9.3%CVE-2022-20703CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.2%KEVCVE-2025-0566HIGHTenda AC15 SetDevNetName formSetDevNetName stack-based overflowEPSS 9.1%CVE-2020-12002—Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lacEPSS 9.1%CVE-2021-1610CRITICALCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management VulnerabilitiesEPSS 9.1%CVE-2025-4883HIGHD-Link DI-8100 Connection Limit Page ctxz.asp ctxz_asp stack-based overflowEPSS 8.9%CVE-2025-11549HIGHTenda W12 HTTP Request modules wifiMacFilterSet stack-based overflowEPSS 8.9%CVE-2025-2620CRITICALD-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflowEPSS 8.8%CVE-2019-7482—Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulneraEPSS 8.8%CVE-2018-14633HIGHA security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication EPSS 8.7%CVE-2018-8840—A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 EPSS 8.6%CVE-2025-51088MEDIUMTenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leEPSS 8.6%CVE-2025-51085MEDIUMTenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument `timeZone` andEPSS 8.6%