Weaknesses of type CWE-120

3,246 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-4148HIGHNetgear EX6200 sub_503FC buffer overflowEPSS 1.7%CVE-2025-4149HIGHNetgear EX6200 sub_54014 buffer overflowEPSS 1.7%CVE-2019-9134HIGHArchitectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary cEPSS 1.7%CVE-2022-29242MEDIUMBuffer Overflow on creating key transport blob in GOST EngineEPSS 1.7%CVE-2012-10035CRITICALTurbo FTP Server 1.30.823/826 PORT Command Buffer OverflowEPSS 1.7%CVE-2021-32968HIGHMoxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer OverflowEPSS 1.7%CVE-2022-40985HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.7%CVE-2024-3871CRITICALAuthenticated Remote Command Injection in Delta Electronics DVWEPSS 1.7%CVE-2023-47610HIGHA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticEPSS 1.7%CVE-2025-31277HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOEPSS 1.7%KEVCVE-2018-15688HIGHOut-of-Bounds write in systemd-networkd dhcpv6 option handlingEPSS 1.7%CVE-2025-41706MEDIUMPhoenix Contact: Webserver Denial of Service through Malformed Content-LengthEPSS 1.7%CVE-2022-31019HIGHDoS Vulnerability in URLEncodedFormDecoder in VaporEPSS 1.7%CVE-2025-4150HIGHNetgear EX6200 sub_54340 buffer overflowEPSS 1.7%CVE-2024-9914HIGHD-Link DIR-619L B1 formSetWizardSelectMode buffer overflowEPSS 1.7%CVE-2024-9913HIGHD-Link DIR-619L B1 formSetRoute buffer overflowEPSS 1.7%CVE-2022-22683CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-EPSS 1.6%CVE-2022-31481CRITICALRemote Code Execution via buffer overflow in firmware update processEPSS 1.6%CVE-2021-33226CRITICALBuffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/moEPSS 1.6%CVE-2022-34823CRITICALBuffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SiEPSS 1.6%