Weaknesses of type CWE-120

3,163 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2011-10005MEDIUMEasyFTP MKD Command buffer overflowEPSS 3.5%CVE-2022-21716HIGHBuffer Overflow in TwistedEPSS 3.5%CVE-2025-55131HIGHA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module witEPSS 3.5%CVE-2023-6175HIGHBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in WiresharkEPSS 3.5%CVE-2020-6088HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 3.5%CVE-2023-1424CRITICALDenial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU moduleEPSS 3.4%CVE-2026-0640HIGHTenda AC23 PowerSaveSet sscanf buffer overflowEPSS 3.4%CVE-2020-10071CRITICALInsufficient publish message length validation in MQTTEPSS 3.4%CVE-2021-27391CRITICALA vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versionsEPSS 3.4%CVE-2016-9428HIGHAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3EPSS 3.3%CVE-2025-10666HIGHD-Link DIR-825 apply.cgi sub_4106d4 buffer overflowEPSS 3.3%CVE-2020-5208HIGHremote code execution vulnerability in ipmitoolEPSS 3.3%CVE-2017-20005CRITICALNGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 thatEPSS 3.3%CVE-2022-20841CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 3.3%CVE-2025-15218HIGHTenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflowEPSS 3.3%CVE-2026-3168HIGHTenda F453 httpd NatStaticSetting fromNatStaticSetting buffer overflowEPSS 3.2%CVE-2026-3399HIGHTenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 3.2%CVE-2025-10792HIGHD-Link DIR-513 formWPS buffer overflowEPSS 3.2%CVE-2020-6017—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegmentEPSS 3.2%CVE-2020-6018—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::DecryEPSS 3.2%