Weaknesses of type CWE-121

3,831 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2023-23780HIGHA stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet ForEPSS 0.8%CVE-2026-77148CRITICALComfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflowEPSS 0.8%CVE-2026-5544HIGHUTT HiPER 1250GW formRemoteControl stack-based overflowEPSS 0.8%CVE-2026-4489HIGHTenda A18 Pro fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowEPSS 0.8%CVE-2026-9631HIGHUTT HiPER 1250GW Web Management formConfigFastDirectionW strcpy stack-based overflowEPSS 0.8%CVE-2026-6196HIGHTenda F456 exeCommand fromexeCommand stack-based overflowEPSS 0.8%CVE-2026-4490HIGHTenda A18 Pro openSchedWifi setSchedWifi stack-based overflowEPSS 0.8%CVE-2026-77022CRITICALComfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflowEPSS 0.8%CVE-2026-9632HIGHUTT HiPER 1250GW Web Management formGroupConfig strcpy stack-based overflowEPSS 0.8%CVE-2026-4493HIGHTenda A18 Pro MAC Filtering Configuration Endpoint setMacFilterCfg sub_423B50 stack-based overflowEPSS 0.8%CVE-2026-16097HIGHShibby Tomato Scheduler Name sub_42537C stack-based overflowEPSS 0.8%CVE-2026-18607HIGHWavlink NU516 lighttpd upload.cgi strcpy stack-based overflowEPSS 0.8%CVE-2026-9428HIGHTenda F1202 PPTPUserSetting fromPPTPUserSetting stack-based overflowEPSS 0.8%CVE-2026-15480HIGHTrendnet TEW-635BRM Web Service rc start_httpd stack-based overflowEPSS 0.8%CVE-2026-4491HIGHTenda A18 Pro SetIpMacBind fromSetIpMacBind stack-based overflowEPSS 0.8%CVE-2026-9429HIGHTenda F1202 WrlExtraSet formWrlExtraSet stack-based overflowEPSS 0.8%CVE-2026-15548HIGHShibby Tomato DNS List Rendering httpd sub_407220 stack-based overflowEPSS 0.8%CVE-2026-9431HIGHTenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflowEPSS 0.8%CVE-2026-14721HIGHUTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflowEPSS 0.8%CVE-2026-9430HIGHTenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflowEPSS 0.8%