Weaknesses of type CWE-121

3,825 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2021-25667MEDIUMA vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4),EPSS 0.9%CVE-2025-7790HIGHD-Link DI-8100 HTTP Request menu_nat.asp stack-based overflowEPSS 0.9%CVE-2026-49759HIGHStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashEPSS 0.9%CVE-2026-69614HIGHMicrosoft Office Access Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-29164CRITICALHDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causingEPSS 0.9%CVE-2023-41028CRITICALJuplink RX4-1500 Stack-based Buffer Overflow VulnerabilityEPSS 0.9%CVE-2023-27361MEDIUMNETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-9791HIGHTenda AC20 fromAdvSetMacMtuWan stack-based overflowEPSS 0.9%CVE-2026-15693HIGHTenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflowEPSS 0.9%CVE-2026-19822HIGHTenda W20E QoS Edit editQos lstAdd stack-based overflowEPSS 0.9%CVE-2026-19846HIGHTOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflowEPSS 0.9%CVE-2026-19788HIGHTenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflowEPSS 0.9%CVE-2026-76590CRITICALTRENDnet TEW-755AP ssi wan.cgi stack-based overflowEPSS 0.9%CVE-2026-75877CRITICALTRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflowEPSS 0.9%CVE-2026-13517HIGHTenda JD12L WifiBasicSet formWifiBasicSet stack-based overflowEPSS 0.9%CVE-2026-13519HIGHTenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 0.9%CVE-2026-15692HIGHTenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflowEPSS 0.9%CVE-2026-76584CRITICALTRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflowEPSS 0.9%CVE-2026-13518HIGHTenda JD12L addressNat fromAddressNat stack-based overflowEPSS 0.9%CVE-2026-19813HIGHTOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflowEPSS 0.9%