Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2023-34306HIGHAshlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-13189HIGHD-Link DIR-816L gena.cgi genacgi_main stack-based overflowEPSS 0.9%CVE-2023-34285HIGHNETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-0931MEDIUMTenda AC10U saveParentControlInfo stack-based overflowEPSS 0.9%CVE-2024-0932MEDIUMTenda AC10U setSmartPowerManagement stack-based overflowEPSS 0.9%CVE-2025-6886HIGHTenda AC5 openSchedWifi stack-based overflowEPSS 0.9%CVE-2024-0922MEDIUMTenda AC10U formQuickIndex stack-based overflowEPSS 0.9%CVE-2023-48270HIGHA stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craEPSS 0.9%CVE-2023-49073HIGHA stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crEPSS 0.9%CVE-2024-0923MEDIUMTenda AC10U formSetDeviceName stack-based overflowEPSS 0.9%CVE-2023-49595HIGHA stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11. A sEPSS 0.9%CVE-2022-21201HIGHA stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_EPSS 0.9%CVE-2026-0791HIGHALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-2263CRITICALSantesoft Sante PACS Server Stack-based Buffer OverflowEPSS 0.9%CVE-2024-31079MEDIUMNGINX HTTP/3 QUIC vulnerabilityEPSS 0.9%CVE-2020-12820MEDIUMUnder non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and below may allow a remEPSS 0.9%CVE-2026-5605HIGHTenda CH22 WrlExtraSet formWrlExtraSet stack-based overflowEPSS 0.9%CVE-2026-5604HIGHTenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflowEPSS 0.9%CVE-2023-28703HIGHASUS RT-AC86U - Buffer OverflowEPSS 0.9%CVE-2025-10779HIGHD-Link DCS-935L HNAP1 sub_402280 stack-based overflowEPSS 0.9%