Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-1999-0038HIGHBuffer overflow in xlock program allows local users to execute commands as root.EPSS 1.3%CVE-2023-7222HIGHTotolink X2000R HTTP POST Request boa formTmultiAP buffer overflowEPSS 1.3%CVE-2022-48620CRITICALuev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.EPSS 1.3%CVE-2023-20024HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 1.3%CVE-2021-33972CRITICALBuffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows attacker to escalate priveleges.EPSS 1.3%CVE-2024-9569HIGHD-Link DIR-619L B1 formEasySetPassword buffer overflowEPSS 1.3%CVE-2024-9567HIGHD-Link DIR-619L B1 formAdvFirewall buffer overflowEPSS 1.3%CVE-2024-9568HIGHD-Link DIR-619L B1 formAdvNetwork buffer overflowEPSS 1.3%CVE-2024-36272CRITICALA buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HEPSS 1.3%CVE-2024-37184CRITICALA buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafteEPSS 1.3%CVE-2024-24479HIGHA Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractiEPSS 1.3%CVE-2024-39774CRITICALA buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted EPSS 1.3%CVE-2025-11294HIGHBelkin F9K1015 formL2TPSetup buffer overflowEPSS 1.3%CVE-2022-1735MEDIUMClassic Buffer Overflow in vim/vimEPSS 1.3%CVE-2025-6146HIGHTOTOLINK X15 HTTP POST Request formSysLog buffer overflowEPSS 1.3%CVE-2022-44204CRITICALD-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.EPSS 1.3%CVE-2015-20111CRITICALminiupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffeEPSS 1.3%CVE-2022-24805MEDIUMnet-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.EPSS 1.3%CVE-2023-40589MEDIUMFreeRDP Global-Buffer-Overflow in ncrush_decompressEPSS 1.3%CVE-2021-38689HIGHStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR GuardEPSS 1.3%