Weaknesses of type CWE-120

3,163 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-12686CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-6EPSS 2.8%CVE-2018-14652MEDIUMThe Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code hEPSS 2.7%CVE-2024-1786HIGHD-Link DIR-600M C1 Telnet Service buffer overflowEPSS 2.7%CVE-2022-41030HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 2.7%CVE-2023-38036CRITICALA security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overfEPSS 2.7%CVE-2020-14355—Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14EPSS 2.7%CVE-2021-34727CRITICALCisco IOS XE SD-WAN Software Buffer Overflow VulnerabilityEPSS 2.6%CVE-2024-9908MEDIUMD-Link DIR-619L B1 formSetMACFilter buffer overflowEPSS 2.6%CVE-2025-4442HIGHD-Link DIR-605L formSetWAN_Wizard55 buffer overflowEPSS 2.6%CVE-2025-4441HIGHD-Link DIR-605L formSetWAN_Wizard534 buffer overflowEPSS 2.6%CVE-2020-28592HIGHA heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AFEPSS 2.5%CVE-2022-22687CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStationEPSS 2.4%CVE-2021-26606CRITICALDreamSecurity MagicLine Buffer Overflow VulnerabilityEPSS 2.4%CVE-2021-43082—heap-buffer-overflow with stats-over-http pluginEPSS 2.4%CVE-2022-23093MEDIUMStack overflow in ping(8)EPSS 2.4%CVE-2022-24764HIGHStack buffer overflow in pjprojectEPSS 2.4%CVE-2023-22741CRITICALheap-over-flow in stun_parse_attribute in sofia-sipEPSS 2.4%CVE-2021-3185—A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could causeEPSS 2.4%CVE-2024-27280CRITICALA buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte EPSS 2.4%CVE-2021-43303—Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplEPSS 2.4%