Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-7586HIGHTenda AC500 setWtpData formSetAPCfg stack-based overflowEPSS 1.1%CVE-2025-7551HIGHTenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflowEPSS 1.1%CVE-2024-51138CRITICALVigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; EPSS 1.1%CVE-2023-38584CRITICALWeintek cMT3000 HMI Web CGI Stack-based Buffer OverflowEPSS 1.1%CVE-2025-7531HIGHTenda FH1202 PPTPUserSetting fromPptpUserSetting stack-based overflowEPSS 1.1%CVE-2023-41204HIGHD-Link DAP-1325 SetAPLanSettings SecondaryDNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41205HIGHD-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41202HIGHD-Link DAP-1325 SetAPLanSettings Mode Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41208HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41206HIGHD-Link DAP-1325 SetHostIPv6Settings IPv6Mode Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-35718HIGHD-Link DAP-2622 DDP Change ID Password Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41211HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41210HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2 Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41203HIGHD-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41207HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41214HIGHD-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41213HIGHD-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41212HIGHD-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41209HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS1 Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2021-26730CRITICALspx_restservice Login_handler_func Subfunction Stack-Based Buffer OverflowEPSS 1.0%