Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2022-27648HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interactEPSS 0.9%CVE-2025-6565HIGHNetgear WNCE3001 HTTP POST Request http_d stack-based overflowEPSS 0.9%CVE-2024-44589HIGHStack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of EPSS 0.9%CVE-2026-2928HIGHD-Link DWR-M960 WLAN Encryption Configuration Endpoint formWlEncrypt sub_452CCC stack-based overflowEPSS 0.9%CVE-2026-2566HIGHWavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflowEPSS 0.9%CVE-2026-90558CRITICALsngrep through 1.8.4 Stack Buffer Overflow via SIP HeadersEPSS 0.9%CVE-2024-27683CRITICALD-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST reEPSS 0.9%CVE-2024-37978HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 0.9%CVE-2025-46411HIGHA stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master BranchEPSS 0.9%CVE-2023-43492CRITICALWeintek cMT3000 HMI Web CGI Stack-based Buffer OverflowEPSS 0.9%CVE-2025-45842HIGHTOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasEPSS 0.9%CVE-2025-9088HIGHTenda AC20 formSetVirtualSer save_virtualser_data stack-based overflowEPSS 0.9%CVE-2022-40516HIGHStack-based buffer overflow in CoreEPSS 0.9%CVE-2023-25528HIGHNVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker mayEPSS 0.9%CVE-2023-41222MEDIUMD-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41223MEDIUMD-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41221MEDIUMD-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41218MEDIUMD-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41224MEDIUMD-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-7194HIGHD-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflowEPSS 0.9%