Weaknesses of type CWE-120

3,246 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-22725—A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and EPSS 2.8%CVE-2022-41030HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 2.8%CVE-2022-32788CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOEPSS 2.8%CVE-2025-12686CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-6EPSS 2.8%CVE-2018-14652MEDIUMThe Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code hEPSS 2.7%CVE-2024-1786HIGHD-Link DIR-600M C1 Telnet Service buffer overflowEPSS 2.7%CVE-2025-4442HIGHD-Link DIR-605L formSetWAN_Wizard55 buffer overflowEPSS 2.7%CVE-2025-4441HIGHD-Link DIR-605L formSetWAN_Wizard534 buffer overflowEPSS 2.7%CVE-2020-14355—Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14EPSS 2.7%CVE-2022-39344CRITICALAzure RTOS USBX vulnerable to buffer overflow EPSS 2.7%CVE-2021-34727CRITICALCisco IOS XE SD-WAN Software Buffer Overflow VulnerabilityEPSS 2.6%CVE-2024-9908MEDIUMD-Link DIR-619L B1 formSetMACFilter buffer overflowEPSS 2.6%CVE-2026-7082HIGHTenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflowEPSS 2.6%CVE-2020-28592HIGHA heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AFEPSS 2.5%CVE-2023-22741CRITICALheap-over-flow in stun_parse_attribute in sofia-sipEPSS 2.5%CVE-2021-3185—A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could causeEPSS 2.5%CVE-2025-4348HIGHD-Link DIR-600L formSetWanL2TP buffer overflowEPSS 2.5%CVE-2022-22687CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStationEPSS 2.4%CVE-2021-26606CRITICALDreamSecurity MagicLine Buffer Overflow VulnerabilityEPSS 2.4%CVE-2022-41028HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 2.4%