Weaknesses of type CWE-120

3,163 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-4255MEDIUMPCMan FTP Server RMD Command buffer overflowEPSS 2.0%CVE-2026-25994HIGHPJSIP has a heap buffer overflow in ICE with long usernameEPSS 2.0%CVE-2022-31031CRITICALPotential stack buffer overflow when parsing message as a STUN clientEPSS 2.0%CVE-2024-9565HIGHD-Link DIR-605L formSetPassword buffer overflowEPSS 2.0%CVE-2024-9564HIGHD-Link DIR-605L formWlanWizardSetup buffer overflowEPSS 1.9%CVE-2020-2015HIGHPAN-OS: Buffer overflow in the management serverEPSS 1.9%CVE-2020-7559—A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª ContEPSS 1.9%CVE-2020-10042—A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer EPSS 1.9%CVE-2022-20827CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 1.9%CVE-2024-39756CRITICALA buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafteEPSS 1.9%CVE-2024-39358CRITICALA buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTEPSS 1.9%CVE-2025-4462HIGHTOTOLINK N150RT formWsc buffer overflowEPSS 1.9%CVE-2026-7068HIGHD-Link DIR-825 nmbd sserver.c NMBD_process buffer overflowEPSS 1.9%CVE-2023-49287HIGHBuffer overflow vulnerabilities in tinydirEPSS 1.9%CVE-2021-28176MEDIUMASUS BMC's firmware: buffer overflow - DNS configuration functionEPSS 1.9%CVE-2021-28175MEDIUMASUS BMC's firmware: buffer overflow - Radius configuration functionEPSS 1.9%CVE-2024-3120CRITICALStack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrepEPSS 1.9%CVE-2023-6906CRITICALTotolink A7100RU HTTP POST Request main buffer overflowEPSS 1.8%CVE-2018-10637—A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji EleEPSS 1.8%CVE-2021-0249HIGHJunos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.EPSS 1.8%