Weaknesses of type CWE-120

3,246 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2016-6559—The BSD libc library's link_ntoa() function may be vulnerable to a classic buffer overflowEPSS 3.7%CVE-2025-69258CRITICALA LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL EPSS 3.6%CVE-2011-10005MEDIUMEasyFTP MKD Command buffer overflowEPSS 3.5%CVE-2022-21716HIGHBuffer Overflow in TwistedEPSS 3.5%CVE-2020-6088HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 3.5%CVE-2026-2911HIGHTenda FH451 GstDhcpSetSer buffer overflowEPSS 3.5%CVE-2025-12236HIGHTenda CH22 DhcpListClient fromDhcpListClient buffer overflowEPSS 3.5%CVE-2026-0640HIGHTenda AC23 PowerSaveSet sscanf buffer overflowEPSS 3.5%CVE-2023-6175HIGHBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in WiresharkEPSS 3.5%CVE-2025-55131HIGHA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module witEPSS 3.5%CVE-2023-1424CRITICALDenial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU moduleEPSS 3.4%CVE-2025-10792HIGHD-Link DIR-513 formWPS buffer overflowEPSS 3.4%CVE-2022-20841CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 3.4%CVE-2020-10071CRITICALInsufficient publish message length validation in MQTTEPSS 3.4%CVE-2025-10666HIGHD-Link DIR-825 apply.cgi sub_4106d4 buffer overflowEPSS 3.4%CVE-2021-27391CRITICALA vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versionsEPSS 3.4%CVE-2016-9428HIGHAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3EPSS 3.3%CVE-2025-15218HIGHTenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflowEPSS 3.3%CVE-2020-5208HIGHremote code execution vulnerability in ipmitoolEPSS 3.3%CVE-2022-36279HIGHA stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A sEPSS 3.3%