Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2026-91003CRITICALD-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowEPSS 1.0%CVE-2023-2676MEDIUMH3C R160 aspForm stack-based overflowEPSS 1.0%CVE-2026-6350CRITICALOpenfind｜MailGates/MailAudit - Stack-based Buffer OverflowEPSS 1.0%CVE-2026-94089CRITICALD-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflowEPSS 1.0%CVE-2024-0535HIGHTenda PA6 httpd portmap cgiPortMapAdd stack-based overflowEPSS 1.0%CVE-2026-3678HIGHTenda FH451 AdvSetWan sub_3C434 stack-based overflowEPSS 1.0%CVE-2026-3679HIGHTenda FH451 QuickIndex formQuickIndex stack-based overflowEPSS 1.0%CVE-2025-14878CRITICALTenda WH450 HTTP Request wirelessRestart stack-based overflowEPSS 1.0%CVE-2025-14665CRITICALTenda WH450 HTTP Request DhcpListClient stack-based overflowEPSS 1.0%CVE-2021-38413HIGHFuji Electric Tellus Lite V-Simulator stack based buffer overflowEPSS 1.0%CVE-2023-45481CRITICALTenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetEPSS 1.0%CVE-2024-9284HIGHTP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflowEPSS 1.0%CVE-2021-21906HIGHStack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is usEPSS 1.0%CVE-2026-41089CRITICALWindows Netlogon Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-62878CRITICALWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-72982CRITICALWindows Netlogon Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-44815CRITICALDHCP Client Service Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-69910CRITICALWindows Hyper-V Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-25170HIGHICSA-22-055-01 FATEK Automation FvDesignerEPSS 1.0%CVE-2024-23957HIGHAutel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%