Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-24017CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24010CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24028CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24014CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24012CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24027CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2024-28639CRITICALBuffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to executeEPSS 1.2%CVE-2024-23286CRITICALA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOEPSS 1.2%CVE-2023-30280CRITICALBuffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute aEPSS 1.2%CVE-2020-27818—A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheckEPSS 1.2%CVE-2025-32105CRITICALA buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution.EPSS 1.2%CVE-2023-52735CRITICALbpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itselfEPSS 1.2%CVE-2022-29223HIGHBuffer overflow on HUB descriptor in Azure RTOS USBXEPSS 1.2%CVE-2025-6128HIGHTOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflowEPSS 1.2%CVE-2022-26342HIGHA buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A sEPSS 1.2%CVE-2022-0324HIGHBuffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)EPSS 1.2%CVE-2022-24324CRITICALA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadinEPSS 1.2%CVE-2024-7337HIGHTOTOLINK EX1200L cstecgi.cgi loginauth buffer overflowEPSS 1.2%CVE-2022-20888MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.2%CVE-2022-20887MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.2%