Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2023-35634HIGHWindows Bluetooth Driver Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-6302HIGHTOTOLINK EX1200T cstecgi.cgi setStaticDhcpConfig stack-based overflowEPSS 1.0%CVE-2025-27151MEDIUMredis-check-aof may lead to stack overflow and potential RCEEPSS 1.0%CVE-2025-6334HIGHD-Link DIR-867 Query String strncpy stack-based overflowEPSS 1.0%CVE-2021-21905HIGHStack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is usEPSS 1.0%CVE-2023-2923MEDIUMTenda AC6 fromDhcpListClient stack-based overflowEPSS 1.0%CVE-2023-20250MEDIUMA vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an autheEPSS 0.9%CVE-2023-3943CRITICALMultiple buffer overflow in ZkTeco-based OEM devicesEPSS 0.9%CVE-2025-12241HIGHTOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflowEPSS 0.9%CVE-2025-12209HIGHTenda O3 setDhcpConfig GetValue stack-based overflowEPSS 0.9%CVE-2025-12225HIGHTenda AC6 HTTP Request WifiGuestSet stack-based overflowEPSS 0.9%CVE-2026-5991HIGHTenda F451 WrlExtraSet formWrlExtraSet stack-based overflowEPSS 0.9%CVE-2026-6121HIGHTenda F451 httpd WrlclientSet stack-based overflowEPSS 0.9%CVE-2026-5989HIGHTenda F451 RouteStatic fromRouteStatic stack-based overflowEPSS 0.9%CVE-2026-6137HIGHTenda F451 AdvSetWan fromAdvSetWan stack-based overflowEPSS 0.9%CVE-2026-6134HIGHTenda F451 qossetting fromqossetting stack-based overflowEPSS 0.9%CVE-2026-5992HIGHTenda F451 P2pListFilter fromP2pListFilter stack-based overflowEPSS 0.9%CVE-2026-5988HIGHTenda F451 AdvSetWrlsafeset formWrlsafeset stack-based overflowEPSS 0.9%CVE-2026-6135HIGHTenda F451 SetIpBind fromSetIpBind stack-based overflowEPSS 0.9%CVE-2026-6124HIGHTenda F451 httpd SafeMacFilter fromSafeMacFilter stack-based overflowEPSS 0.9%