Weaknesses of type CWE-121

4,132 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2021-23138HIGHWECON LeviStudioUEPSS 8.6%CVE-2020-15636HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900,EPSS 8.5%CVE-2017-15088—plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which EPSS 8.3%CVE-2024-27459HIGHThe interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute aEPSS 8.3%CVE-2024-7441HIGHVivotek SD9364 httpd read stack-based overflowEPSS 8.1%CVE-2020-27261—Omron CX-OneEPSS 7.9%CVE-2025-5853HIGHTenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowEPSS 7.8%CVE-2021-35003CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 reEPSS 7.7%CVE-2021-35004HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 relEPSS 7.7%CVE-2023-38148HIGHInternet Connection Sharing (ICS) Remote Code Execution VulnerabilityEPSS 7.7%CVE-2025-7091HIGHBelkin F9K1122 webs formWlanMP stack-based overflowEPSS 7.7%CVE-2026-1457HIGHAuthenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385EPSS 7.5%CVE-2025-62507HIGHRedis: Bug in XACKDEL may lead to stack overflow and potential RCEEPSS 7.5%CVE-2017-14854CRITICALA stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects alEPSS 7.4%CVE-2025-3693HIGHTenda W12 httpd cgiWifiRadioSet stack-based overflowEPSS 7.4%CVE-2026-10187CRITICALTotolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflowEPSS 7.3%CVE-2018-17930—A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, which may allow remoteEPSS 7.3%CVE-2022-24049CRITICALThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systeEPSS 7.2%CVE-2025-2097HIGHTOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflowEPSS 7.2%CVE-2021-38402HIGHDelta Electronics DOPSoft 2 Stack-Based Buffer OverflowEPSS 7.1%