Weaknesses of type CWE-120

3,163 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-24237CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS SequoiaEPSS 1.6%CVE-2024-4020HIGHTenda FH1206 addressNat fromAddressNat buffer overflowEPSS 1.6%CVE-2024-9912HIGHD-Link DIR-619L B1 formSetQoS buffer overflowEPSS 1.6%CVE-2024-9910HIGHD-Link DIR-619L B1 formSetPassword buffer overflowEPSS 1.6%CVE-2024-9911HIGHD-Link DIR-619L B1 formSetPortTr buffer overflowEPSS 1.6%CVE-2023-23513CRITICALA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS EPSS 1.6%CVE-2022-34756HIGHA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs EPSS 1.6%CVE-2021-21901CRITICALA stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. EPSS 1.6%CVE-2018-0721HIGHSecurity Advisory for Vulnerabilities in QTSEPSS 1.6%CVE-2025-8168HIGHD-Link DIR-513 formSetWanPPPoE websAspInit buffer overflowEPSS 1.6%CVE-2023-49502HIGHBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intraEPSS 1.5%CVE-2022-31481CRITICALRemote Code Execution via buffer overflow in firmware update processEPSS 1.5%CVE-2024-32017CRITICALBuffer overflows in RIOTEPSS 1.5%CVE-2025-4150HIGHNetgear EX6200 sub_54340 buffer overflowEPSS 1.5%CVE-2024-39299CRITICALA buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially craEPSS 1.5%CVE-2024-39294CRITICALA buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted EPSS 1.5%CVE-2021-3056HIGHPAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML AuthenticationEPSS 1.5%CVE-2025-31277HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOEPSS 1.5%KEVCVE-2019-7485—Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impEPSS 1.5%CVE-2024-32018HIGHIneffective size check due to assert() and buffer overflow in RIOTEPSS 1.5%