Weaknesses of type CWE-120

3,167 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-69674MEDIUMBuffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7_P161006 (Build.0333.250211) allows an attacker to execute arbitrary code via theEPSS 0.2%CVE-2026-1679HIGHnet: eswifi socket send payload length not boundedEPSS 0.2%CVE-2021-29540LOWHeap buffer overflow in `Conv2DBackpropFilter`EPSS 0.2%CVE-2024-40674MEDIUMIn validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the cEPSS 0.2%CVE-2023-25505HIGHNVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authoEPSS 0.2%CVE-2024-0099HIGHCVEEPSS 0.2%CVE-2024-29166MEDIUMHDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction pointer and causing deniEPSS 0.2%CVE-2020-37042HIGHFrigate Professional 3.36.0.9 - 'Find Computer' Local Buffer OverflowEPSS 0.2%CVE-2026-0141MEDIUMIn decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. This could lead to remote information dEPSS 0.2%CVE-2021-36333MEDIUMDell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. A local low privileged attacker, may potentially explEPSS 0.2%CVE-2021-29512LOWHeap buffer overflow in `RaggedBinCount`EPSS 0.2%CVE-2022-50689MEDIUMCobian Reflector 0.9.93 RC1 Local Denial of Service via Password FieldEPSS 0.2%CVE-2022-49754HIGHBluetooth: Fix a buffer overflow in mgmt_mesh_add()EPSS 0.2%CVE-2024-6563HIGHBuffer Overflow Arbitrary WriteEPSS 0.2%CVE-2020-37040HIGHCode Blocks 17.12 - 'File Name' Local Buffer OverflowEPSS 0.2%CVE-2023-6948LOWA Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 coulEPSS 0.2%CVE-2022-47990MEDIUMIBM AIX denial of serviceEPSS 0.2%CVE-2022-42283MEDIUMNVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service EPSS 0.2%CVE-2025-12142MEDIUMBSS(Block Started by Symbol) Memory Corruption VulnerabilityEPSS 0.2%CVE-2023-28741HIGHBuffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentiallyEPSS 0.2%