Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2026-5046HIGHTenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflowEPSS 1.0%CVE-2026-5349HIGHTrendnet TEW-657BRM setup.cgi add_apcdb stack-based overflowEPSS 1.0%CVE-2026-4975HIGHTenda AC15 POST Request setcfm formSetCfm memory corruptionEPSS 1.0%CVE-2026-3799HIGHTenda i3 setcfm formSetCfm stack-based overflowEPSS 1.0%CVE-2026-3769HIGHTenda F453 WrlclientSet stack-based overflowEPSS 1.0%CVE-2026-6015HIGHTenda AC9 POST Request QuickIndex formQuickIndex stack-based overflowEPSS 1.0%CVE-2026-3974HIGHTenda W3 HTTP exeCommand formexeCommand stack-based overflowEPSS 1.0%CVE-2026-4974HIGHTenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruptionEPSS 1.0%CVE-2026-3810HIGHTenda FH1202 DhcpListClient fromDhcpListClient stack-based overflowEPSS 1.0%CVE-2026-5155HIGHTenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflowEPSS 1.0%CVE-2026-4007HIGHTenda W3 POST Parameter wifiSSIDget stack-based overflowEPSS 1.0%CVE-2026-4906HIGHTenda AC5 POST Request WizardHandle decodePwd stack-based overflowEPSS 1.0%CVE-2026-4960HIGHTenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflowEPSS 1.0%CVE-2026-4905HIGHTenda AC5 POST Request WifiWpsOOB formWifiWpsOOB stack-based overflowEPSS 1.0%CVE-2026-4042HIGHTenda i12 WifiMacFilterGet formWifiMacFilterGet stack-based overflowEPSS 1.0%CVE-2026-3677HIGHTenda FH451 setcfm fromSetCfm stack-based overflowEPSS 1.0%CVE-2026-3729HIGHTenda F453 PPTPDClient fromPptpUserAdd stack-based overflowEPSS 1.0%CVE-2026-3715HIGHWavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflowEPSS 1.0%CVE-2026-7035HIGHTenda FH1202 httpd WrlclientSet fromWrlclientSet stack-based overflowEPSS 1.0%CVE-2026-3768HIGHTenda F453 WrlExtraSet formWrlExtraSet stack-based overflowEPSS 1.0%