Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2026-2871HIGHTenda A21 SetIpMacBind fromSetIpMacBind stack-based overflowEPSS 1.0%CVE-2024-7439HIGHVivotek CC8160 httpd read stack-based overflowEPSS 1.0%CVE-2025-11524HIGHTenda AC7 SetDDNSCfg stack-based overflowEPSS 1.0%CVE-2024-10130HIGHTenda AC8 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowEPSS 1.0%CVE-2024-10123HIGHTenda AC8 saveParentControlInfo compare_parentcontrol_time stack-based overflowEPSS 1.0%CVE-2024-23934HIGHSony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-2873HIGHTenda A21 openSchedWifi setSchedWifi stack-based overflowEPSS 1.0%CVE-2026-2909HIGHTenda HG9 Diagnostic Ping Endpoint formPing stack-based overflowEPSS 1.0%CVE-2026-2872HIGHTenda A21 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflowEPSS 1.0%CVE-2026-2907HIGHTenda HG9 GPON Configuration Endpoint formgponConf stack-based overflowEPSS 1.0%CVE-2026-2905HIGHTenda HG9 Wireless Configuration Endpoint formWlanSetup stack-based overflowEPSS 1.0%CVE-2026-2886HIGHTenda A21 SetOnlineDevName set_device_name stack-based overflowEPSS 1.0%CVE-2026-2910HIGHTenda HG9 formPing6 stack-based overflowEPSS 1.0%CVE-2018-14793—DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to alloEPSS 1.0%CVE-2026-2870HIGHTenda A21 formSetQosBand set_qosMib_list stack-based overflowEPSS 1.0%CVE-2026-2906HIGHTenda HG9 Samba Configuration Endpoint formSamba stack-based overflowEPSS 1.0%CVE-2026-2908HIGHTenda HG9 Loopback Detection Configuration Endpoint formLoopBack stack-based overflowEPSS 1.0%CVE-2026-2874HIGHTenda A21 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowEPSS 1.0%CVE-2026-67192CRITICALXlight FTP Server < 3.9.5 Pre-Auth Stack Buffer Overflow via SSH GCM CipherEPSS 1.0%CVE-2022-2078—A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overfEPSS 1.0%