Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-4344HIGHD-Link DIR-600L formLogin buffer overflowEPSS 1.4%CVE-2025-4346HIGHD-Link DIR-600L formSetWAN_Wizard534 buffer overflowEPSS 1.4%CVE-2025-4345HIGHD-Link DIR-600L formSetLog buffer overflowEPSS 1.4%CVE-2024-8573HIGHTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflowEPSS 1.4%CVE-2023-28504CRITICALStack buffer overflow in UniRPC library functionEPSS 1.4%CVE-2022-40986HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.4%CVE-2022-40998HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.4%CVE-2022-40990HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.4%CVE-2024-9557HIGHD-Link DIR-605L formSetWanPPPoE buffer overflowEPSS 1.4%CVE-2025-41707MEDIUMPhoenix Contact: WebSocket Handler Denial of ServiceEPSS 1.4%CVE-2024-9559HIGHD-Link DIR-605L formWlanSetup buffer overflowEPSS 1.4%CVE-2024-9558HIGHD-Link DIR-605L formSetWanPPTP buffer overflowEPSS 1.4%CVE-2024-9551HIGHD-Link DIR-605L formSetWanL2TP buffer overflowEPSS 1.4%CVE-2024-9563HIGHD-Link DIR-605L formWlanSetup_Wizard buffer overflowEPSS 1.4%CVE-2024-9552HIGHD-Link DIR-605L formSetWanNonLogin buffer overflowEPSS 1.4%CVE-2024-36290CRITICALA buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially craftedEPSS 1.4%CVE-2025-4146HIGHNetgear EX6200 sub_41940 buffer overflowEPSS 1.4%CVE-2024-24474HIGHQEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is lessEPSS 1.4%CVE-2018-14788—Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certainEPSS 1.4%CVE-2022-26334—A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XEPSS 1.4%