Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2023-7221CRITICALTotolink T6 HTTP POST Request main buffer overflowEPSS 1.5%CVE-2023-27518HIGHBuffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F vEPSS 1.5%CVE-2026-7853CRITICALD-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflowEPSS 1.5%CVE-2020-20703CRITICALBuffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.EPSS 1.5%CVE-2024-9550HIGHD-Link DIR-605L formLogDnsquery buffer overflowEPSS 1.5%CVE-2024-9549HIGHD-Link DIR-605L formEasySetupWizard formEasySetupWizard2 buffer overflowEPSS 1.5%CVE-2024-9534HIGHD-Link DIR-605L formEasySetPassword buffer overflowEPSS 1.5%CVE-2024-9785HIGHD-Link DIR-619L B1 formSetDDNS buffer overflowEPSS 1.5%CVE-2023-27972CRITICALCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.EPSS 1.5%CVE-2024-9532HIGHD-Link DIR-605L formAdvanceSetup buffer overflowEPSS 1.5%CVE-2024-24450MEDIUMStack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 alloEPSS 1.5%CVE-2024-7613HIGHTenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 1.5%CVE-2023-1329—A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer OvEPSS 1.5%CVE-2022-32941CRITICALThe issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPaEPSS 1.5%CVE-2025-6098CRITICALUTT 进取 750W API setSysAdm strcpy buffer overflowEPSS 1.5%CVE-2024-9514HIGHD-Link DIR-605L formSetDomainFilter buffer overflowEPSS 1.5%CVE-2024-9533HIGHD-Link DIR-605L formDeviceReboot buffer overflowEPSS 1.5%CVE-2024-39349CRITICALA vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and itEPSS 1.4%CVE-2023-39667CRITICALD-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 funEPSS 1.4%CVE-2025-3988HIGHTOTOLINK N150RT formPortFw buffer overflowEPSS 1.4%