Weaknesses of type CWE-121

3,831 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2025-70230CRITICALStack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.EPSS 0.8%CVE-2023-37322HIGHD-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37312HIGHD-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-27369HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-37313HIGHD-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37311HIGHD-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37326HIGHD-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37315HIGHD-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37316HIGHD-Link DAP-2622 DDP Set IPv6 Address Default Gateway Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37320HIGHD-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37318HIGHD-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37314HIGHD-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-27368HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-37321HIGHD-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37317HIGHD-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-37319HIGHD-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-14993HIGHTenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflowEPSS 0.8%CVE-2024-30627HIGHTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from saveParentControlInfo function.EPSS 0.8%CVE-2022-43764CRITICALBuffer overflow when changing configuration on Tbase ServerEPSS 0.8%CVE-2024-5507HIGHLuxion KeyShot Viewer KSP File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%