Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-22570—A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malEPSS 1.1%CVE-2020-5213MEDIUMNetHack SYMBOL configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2025-8242HIGHTOTOLINK X15 HTTP POST Request formFilter buffer overflowEPSS 1.1%CVE-2020-5212MEDIUMNetHack MENUCOLOR configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2025-5910HIGHTOTOLINK EX1200T HTTP POST Request formWsc buffer overflowEPSS 1.1%CVE-2025-5911HIGHTOTOLINK EX1200T HTTP POST Request formDMZ buffer overflowEPSS 1.1%CVE-2023-39204MEDIUMBuffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.EPSS 1.1%CVE-2023-3725HIGHPotential buffer overflow vulnerability in the Zephyr CANbus subsystemEPSS 1.1%CVE-2026-3701HIGHH3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflowEPSS 1.1%CVE-2024-41285CRITICALA stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoSEPSS 1.1%CVE-2022-45719CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.EPSS 1.1%CVE-2022-28550CRITICALMatthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer EPSS 1.1%CVE-2022-45715CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the EPSS 1.1%CVE-2022-45714CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.EPSS 1.1%CVE-2022-45707CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.EPSS 1.1%CVE-2022-45706CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.EPSS 1.1%CVE-2022-45708CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping functionEPSS 1.1%CVE-2022-45712CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.EPSS 1.1%CVE-2022-45710CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the forEPSS 1.1%CVE-2026-3271HIGHTenda F453 httpd P2pListFilterof fromP2pListFilter buffer overflowEPSS 1.1%