Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-6373HIGHD-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflowEPSS 0.9%CVE-2026-45648HIGHWindows Active Directory Domain Services Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-1179HIGHTP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-44016HIGHTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWiEPSS 0.9%CVE-2023-44013HIGHTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpEPSS 0.9%CVE-2023-44017HIGHTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSEPSS 0.9%CVE-2023-44014HIGHTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg funcEPSS 0.9%CVE-2023-44019HIGHTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentCEPSS 0.9%CVE-2026-82592CRITICALD-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflowEPSS 0.9%CVE-2026-90680CRITICALD-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowEPSS 0.9%CVE-2026-82593CRITICALD-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflowEPSS 0.9%CVE-2026-90693CRITICALD-Link DIR-878 WAN Settings SetWan3Settings stack-based overflowEPSS 0.9%CVE-2026-5815HIGHD-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflowEPSS 0.9%CVE-2026-90692CRITICALD-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflowEPSS 0.9%CVE-2025-69763CRITICALTenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enaEPSS 0.9%CVE-2024-23967HIGHAutel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-69762CRITICALTenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enablEPSS 0.9%CVE-2022-1211MEDIUMtildearrow Furnace FUR to VGM Converter stack-based overflowEPSS 0.9%CVE-2024-0924MEDIUMTenda AC10U formSetPPTPServer stack-based overflowEPSS 0.9%CVE-2024-0926MEDIUMTenda AC10U formWifiWpsOOB stack-based overflowEPSS 0.9%