Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-8820HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflowEPSS 1.0%CVE-2025-8832HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflowEPSS 1.0%CVE-2025-15010CRITICALTenda WH450 SafeUrlFilter stack-based overflowEPSS 1.0%CVE-2025-4007HIGHTenda W12/i24 httpd modules cgidhcpsCfgSet stack-based overflowEPSS 1.0%CVE-2025-9483HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 singlePortForwardAdd stack-based overflowEPSS 1.0%CVE-2026-5830HIGHTenda AC15 SysToolChangePwd websGetVar stack-based overflowEPSS 1.0%CVE-2025-15007CRITICALTenda WH450 HTTP Request L7Im stack-based overflowEPSS 1.0%CVE-2025-9357HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchByBBS stack-based overflowEPSS 1.0%CVE-2025-3803HIGHTenda W12/i24 httpd cgiSysScheduleRebootSet stack-based overflowEPSS 1.0%CVE-2025-9358HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setSysAdm stack-based overflowEPSS 1.0%CVE-2025-9359HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_checkCredentialsByBBS stack-based overflowEPSS 1.0%CVE-2026-26732HIGHTOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters inEPSS 1.0%CVE-2025-29840HIGHWindows Media Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-10281HIGHTenda RX9/RX9 Pro SetStaticRouteCfg sub_42EEE0 stack-based overflowEPSS 1.0%CVE-2025-12210HIGHTenda O3 AdvSetLanip GetValue stack-based overflowEPSS 1.0%CVE-2024-6403HIGHTenda A301 SetOnlineDevName formWifiBasicSet stack-based overflowEPSS 1.0%CVE-2022-43630HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AuEPSS 1.0%CVE-2022-43622HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AuEPSS 1.0%CVE-2024-6402HIGHTenda A301 SetOnlineDevName fromSetWirelessRepeat stack-based overflowEPSS 1.0%CVE-2024-0577HIGHTotolink LR1200GB cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.0%