Weaknesses of type CWE-120

3,246 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2023-22780CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2023-22783CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2023-22784CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2023-22785CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2022-31031CRITICALPotential stack buffer overflow when parsing message as a STUN clientEPSS 2.1%CVE-2023-22782CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2022-39274HIGHBuffer Overflow in `ProcessRadioRxDone` in LoRaMac-nodeEPSS 2.0%CVE-2026-25994HIGHPJSIP has a heap buffer overflow in ICE with long usernameEPSS 2.0%CVE-2025-4462HIGHTOTOLINK N150RT formWsc buffer overflowEPSS 2.0%CVE-2024-9565HIGHD-Link DIR-605L formSetPassword buffer overflowEPSS 2.0%CVE-2022-20827CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 2.0%CVE-2024-9564HIGHD-Link DIR-605L formWlanWizardSetup buffer overflowEPSS 1.9%CVE-2021-28176MEDIUMASUS BMC's firmware: buffer overflow - DNS configuration functionEPSS 1.9%CVE-2021-28175MEDIUMASUS BMC's firmware: buffer overflow - Radius configuration functionEPSS 1.9%CVE-2024-39358CRITICALA buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTEPSS 1.9%CVE-2024-39756CRITICALA buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafteEPSS 1.9%CVE-2022-20842CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 1.9%CVE-2020-2015HIGHPAN-OS: Buffer overflow in the management serverEPSS 1.9%CVE-2020-7559—A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª ContEPSS 1.9%CVE-2020-10042—A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer EPSS 1.9%