Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-3484CRITICALMedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-30306MEDIUMA stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, veEPSS 1.0%CVE-2024-20998MEDIUMVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 aEPSS 1.0%CVE-2024-21054MEDIUMVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 aEPSS 1.0%CVE-2025-9393HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaProfile stack-based overflowEPSS 1.0%CVE-2025-8831HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 remoteManagement stack-based overflowEPSS 1.0%CVE-2025-9361HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 ipRangeBlockManageRule stack-based overflowEPSS 1.0%CVE-2025-9355HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 scheduleAdd stack-based overflowEPSS 1.0%CVE-2025-15006CRITICALTenda WH450 HTTP Request CheckTools stack-based overflowEPSS 1.0%CVE-2025-9356HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 inboundFilterAdd stack-based overflowEPSS 1.0%CVE-2025-9001MEDIUMLemonOS HTTP Client main.cpp HTTPGet stack-based overflowEPSS 1.0%CVE-2023-0341HIGHStack Buffer Overflow in editorconfig-core-cEPSS 1.0%CVE-2022-1068MEDIUMModbus Tools Modbus Slave Stack-Based Buffer OverflowEPSS 1.0%CVE-2025-7602HIGHD-Link DI-8100 HTTP Request arp_sys.asp stack-based overflowEPSS 1.0%CVE-2025-7603HIGHD-Link DI-8100 HTTP Request jingx.asp stack-based overflowEPSS 1.0%CVE-2026-2876HIGHTenda A18 setBlackRule parse_macfilter_rule stack-based overflowEPSS 1.0%CVE-2026-2877HIGHTenda A18 Httpd Service WifiExtraSet strcpy stack-based overflowEPSS 1.0%CVE-2025-9250HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setPWDbyBBS stack-based overflowEPSS 1.0%CVE-2025-9253HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_doSpecifySiteSurvey stack-based overflowEPSS 1.0%CVE-2026-3044HIGHTenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflowEPSS 1.0%