Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-20910MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.1%CVE-2022-20879MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.1%CVE-2022-20873MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.1%CVE-2026-86165CRITICALTenda HG10 formURL buffer overflowEPSS 1.1%CVE-2025-4140HIGHNetgear EX6120 sub_30394 buffer overflowEPSS 1.1%CVE-2025-4145HIGHNetgear EX6200 sub_3D0BC buffer overflowEPSS 1.1%CVE-2025-4142HIGHNetgear EX6200 sub_3C8EC buffer overflowEPSS 1.1%CVE-2026-7068HIGHD-Link DIR-825 nmbd sserver.c NMBD_process buffer overflowEPSS 1.1%CVE-2021-45423CRITICALA Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Names is dynamically allEPSS 1.1%CVE-2024-33454MEDIUMBuffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stacEPSS 1.1%CVE-2023-37457HIGHAsterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'EPSS 1.1%CVE-2025-11299HIGHBelkin F9K1015 formWanTcpipSetup buffer overflowEPSS 1.1%CVE-2026-2980HIGHUTT HiPER 810G setSysAdm strcpy buffer overflowEPSS 1.1%CVE-2024-6142HIGHActiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2024-6143HIGHActiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2021-31845HIGHRemote Code Execution in McAfee DLP DiscoverEPSS 1.1%CVE-2020-5136—A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assiEPSS 1.1%CVE-2025-12596HIGHTenda AC23 saveParentControlInfo buffer overflowEPSS 1.1%CVE-2025-3786HIGHTenda AC15 WifiExtraSet fromSetWirelessRepeat buffer overflowEPSS 1.1%CVE-2025-9962CRITICALUnauthenticated Buffer OverflowEPSS 1.1%