Weaknesses of type CWE-120

3,165 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-4497MEDIUMcode-projects Simple Banking System Sign In buffer overflowEPSS 0.4%CVE-2026-5279HIGHObject corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a EPSS 0.4%CVE-2024-20723HIGHAdobe Substance 3D Painter v9.0.1Build2822 Buffer Overflow VulnerabilityEPSS 0.4%CVE-2024-1755HIGHNPS computy <= 2.7.5 - Results Deletion via CSRFEPSS 0.4%CVE-2023-33302MEDIUMA buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface versionEPSS 0.4%CVE-2025-25723HIGHBuffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code.EPSS 0.4%CVE-2025-1367MEDIUMMicroWord eScan Antivirus USB Password sprintf buffer overflowEPSS 0.4%CVE-2024-44415MEDIUMA vulnerability was discovered in DI_8200-16.07.26A1, There is a buffer overflow in the dbsrv_asp function; The strcpy function is executed EPSS 0.4%CVE-2025-25472MEDIUMA buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.EPSS 0.4%CVE-2024-12354MEDIUMSourceCodester Phone Contact Manager System User Menu MenuDisplayStart buffer overflowEPSS 0.4%CVE-2024-37571MEDIUMBuffer Overflow vulnerability in SAS Broker 9.2 build 1495 allows attackers to cause denial of service or obtain sensitive information via cEPSS 0.4%CVE-2023-30257HIGHA buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root.EPSS 0.4%CVE-2020-37201MEDIUMNetShareWatcher 1.5.8.0 - 'Name' Denial Of ServiceEPSS 0.4%CVE-2020-37074HIGHRemote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)EPSS 0.4%CVE-2022-46456HIGHNASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.EPSS 0.4%CVE-2024-22912HIGHA global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause coEPSS 0.4%CVE-2024-48981HIGHAn issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet heEPSS 0.4%CVE-2024-45237CRITICALAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync oEPSS 0.4%CVE-2022-40261HIGHSMM memory corruption vulnerability in OverClockSmiHandler SMM driverEPSS 0.4%CVE-2025-52872LOWQTS, QuTS heroEPSS 0.4%