Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2026-3823CRITICALAtop Technologies｜EHG2408 series switch - Stack-based Buffer OverflowEPSS 1.0%CVE-2025-6486HIGHTOTOLINK A3002R formWlanMultipleAP stack-based overflowEPSS 1.0%CVE-2024-0576HIGHTotolink LR1200GB cstecgi.cgi setIpPortFilterRules stack-based overflowEPSS 1.0%CVE-2025-6487HIGHTOTOLINK A3002R formRoute stack-based overflowEPSS 1.0%CVE-2024-2546HIGHTenda AC18 fromSetWirelessRepeat stack-based overflowEPSS 1.0%CVE-2026-2565HIGHWavlink WL-NU516U1 adm.cgi sub_40785C stack-based overflowEPSS 1.0%CVE-2025-5863HIGHTenda AC5 SetRebootTimer formSetRebootTimer stack-based overflowEPSS 1.0%CVE-2025-5685HIGHTenda CH22 Natlimit formNatlimit stack-based overflowEPSS 1.0%CVE-2026-8138HIGHTenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflowEPSS 1.0%CVE-2026-5687HIGHTenda CX12L NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.0%CVE-2026-5686HIGHTenda CX12L RouteStatic fromRouteStatic stack-based overflowEPSS 1.0%CVE-2026-4041HIGHTenda i12 exeCommand vos_strcpy stack-based overflowEPSS 1.0%CVE-2026-5685HIGHTenda CX12L addressNat fromAddressNat stack-based overflowEPSS 1.0%CVE-2026-4043HIGHTenda i12 wifiSSIDget formwrlSSIDget stack-based overflowEPSS 1.0%CVE-2024-43663MEDIUMBuffer overflow vulnerabilities in CGI scripts lead to segfaultEPSS 1.0%CVE-2026-12935HIGHUnauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack FeatureEPSS 1.0%CVE-2025-7094HIGHBelkin F9K1122 webs formBSSetSitesurvey stack-based overflowEPSS 1.0%CVE-2025-5640MEDIUMPX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflowEPSS 1.0%CVE-2024-25751CRITICALA Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to executeEPSS 1.0%CVE-2026-91003CRITICALD-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowEPSS 1.0%