Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2020-5204MEDIUMBuffer overflow vulnerability in uftpdEPSS 1.1%CVE-2025-15044CRITICALTenda WH450 NatStaticSetting stack-based overflowEPSS 1.1%CVE-2025-15045CRITICALTenda WH450 HTTP Request Natlimit stack-based overflowEPSS 1.1%CVE-2025-15046CRITICALTenda WH450 HTTP Request PPTPClient stack-based overflowEPSS 1.1%CVE-2025-3802HIGHTenda W12/i24 httpd cgiPingSet stack-based overflowEPSS 1.1%CVE-2025-11328HIGHTenda AC18 SetDDNSCfg stack-based overflowEPSS 1.1%CVE-2025-7794HIGHTenda FH451 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.1%CVE-2025-7793HIGHTenda FH451 webtypelibrary formWebTypeLibrary stack-based overflowEPSS 1.1%CVE-2025-7792HIGHTenda FH451 SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 1.1%CVE-2025-45429CRITICALIn the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may leEPSS 1.1%CVE-2025-6752HIGHLinksys WRT1900ACS/EA7200/EA7450/EA7500 IGD Layer3Forwarding SetDefaultConnectionService stack-based overflowEPSS 1.1%CVE-2023-37323HIGHD-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2024-25393CRITICALA stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.EPSS 1.1%CVE-2026-4486HIGHD-Link DIR-513 Web Service formEasySetPassword stack-based overflowEPSS 1.1%CVE-2024-0573HIGHTotolink LR1200GB cstecgi.cgi setDiagnosisCfg stack-based overflowEPSS 1.1%CVE-2024-0578HIGHTotolink LR1200GB cstecgi.cgi UploadCustomModule stack-based overflowEPSS 1.1%CVE-2025-9297HIGHTenda i22 wxportalauth formWeixinAuthInfoGet stack-based overflowEPSS 1.1%CVE-2023-3725HIGHPotential buffer overflow vulnerability in the Zephyr CANbus subsystemEPSS 1.1%CVE-2022-43625MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2025-8810HIGHTenda AC20 SetFirewallCfg strcpy stack-based overflowEPSS 1.1%