Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-20887MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.2%CVE-2022-20888MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.2%CVE-2023-38823CRITICALBuffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code vEPSS 1.2%CVE-2021-1493HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service VulnerabilityEPSS 1.2%CVE-2022-20891MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.2%CVE-2025-4343HIGHD-Link DIR-600L formEasySetupWizard buffer overflowEPSS 1.2%CVE-2025-1897HIGHTenda TX3 SetNetControlList buffer overflowEPSS 1.2%CVE-2025-4342HIGHD-Link DIR-600L formEasySetupWizard3 buffer overflowEPSS 1.2%CVE-2022-39244HIGHBuffer overflow in pjlib scanner and pjmediaEPSS 1.2%CVE-2024-7334HIGHTOTOLINK EX1200L cstecgi.cgi UploadCustomModule buffer overflowEPSS 1.2%CVE-2023-3618MEDIUMSegmentation fault in fax3encode in libtiff/tif_fax3.cEPSS 1.2%CVE-2023-20157HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 1.2%CVE-2023-20162HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 1.2%CVE-2023-20158HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 1.2%CVE-2023-20156HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 1.2%CVE-2024-24736HIGHThe POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port 110, a related issueEPSS 1.2%CVE-2024-7177HIGHTOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflowEPSS 1.2%CVE-2024-7174HIGHTOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflowEPSS 1.2%CVE-2024-26134HIGHCBOR2 decoder has potential buffer overflowEPSS 1.2%CVE-2026-0797HIGHGIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.2%