Weaknesses of type CWE-121

3,826 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-9046HIGHTenda AC20 setMacFilterCfg sub_46A2AC stack-based overflowEPSS 0.8%CVE-2021-34861HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routerEPSS 0.8%CVE-2026-67866HIGHBuffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_EPSS 0.8%CVE-2025-13190HIGHD-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflowEPSS 0.8%CVE-2026-48863HIGHLibsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceEPSS 0.8%CVE-2026-62706HIGHMicrosoft Windows Media Foundation Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69686HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69759HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69461HIGHWindows NTFS Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-78504HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-62824HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69722HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-73006HIGHDirectWrite Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-7549HIGHTenda FH1201 L7Prot frmL7ProtForm stack-based overflowEPSS 0.8%CVE-2025-7418HIGHTenda O3V2 httpd setPing fromPingResultGet stack-based overflowEPSS 0.8%CVE-2025-7423HIGHTenda O3V2 httpd setWrlFilterList formWifiMacFilterSet stack-based overflowEPSS 0.8%CVE-2025-7417HIGHTenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflowEPSS 0.8%CVE-2025-7421HIGHTenda O3V2 httpd operateMacFilter fromMacFilterModify stack-based overflowEPSS 0.8%CVE-2025-7548HIGHTenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 0.8%CVE-2025-7419HIGHTenda O3V2 httpd setRateTest fromSpeedTestSet stack-based overflowEPSS 0.8%