Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2020-27507CRITICALThe Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow thatEPSS 1.2%CVE-2022-47035CRITICALBuffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfEPSS 1.2%CVE-2025-8244HIGHTOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflowEPSS 1.2%CVE-2024-57392HIGHBuffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of ServicEPSS 1.2%CVE-2024-7849HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflowEPSS 1.2%CVE-2024-40494CRITICALBuffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overfEPSS 1.2%CVE-2024-5564HIGHLibndp: buffer overflow in route information length fieldEPSS 1.2%CVE-2026-34355HIGHApache HTTP Server: mod_proxy_html buffer overflowEPSS 1.2%CVE-2022-44283CRITICALAVS Audio Converter 10.3 is vulnerable to Buffer Overflow.EPSS 1.2%CVE-2025-4496HIGHTOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflowEPSS 1.2%CVE-2024-7335HIGHTOTOLINK EX200 getSaveConfig buffer overflowEPSS 1.2%CVE-2025-7345HIGHGdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufEPSS 1.2%CVE-2021-28196MEDIUMASUS BMC's firmware: buffer overflow - Generate SSL certificate functionEPSS 1.2%CVE-2021-28187MEDIUMASUS BMC's firmware: buffer overflow - Generate new SSL certificateEPSS 1.2%CVE-2021-28190MEDIUMASUS BMC's firmware: buffer overflow - Generate new certificate functionEPSS 1.2%CVE-2024-7187HIGHTOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflowEPSS 1.2%CVE-2020-7564MEDIUMA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, MoEPSS 1.1%CVE-2021-21826HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecEPSS 1.1%CVE-2021-21828HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the defaEPSS 1.1%CVE-2021-21827HIGHA heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecEPSS 1.1%