Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2024-5974HIGHFirebox Authenticated Buffer Overflow VulnerabilityEPSS 1.0%CVE-2024-8078HIGHTOTOLINK AC1200 T8 setTracerouteCfg buffer overflowEPSS 1.0%CVE-2023-47004HIGHBuffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code EPSS 1.0%CVE-2025-3993HIGHTOTOLINK N150RT formWsc buffer overflowEPSS 1.0%CVE-2025-3989HIGHTOTOLINK N150RT formStaticDHCP buffer overflowEPSS 1.0%CVE-2025-3991HIGHTOTOLINK N150RT formWdsEncrypt buffer overflowEPSS 1.0%CVE-2025-3990HIGHTOTOLINK N150RT formVlan buffer overflowEPSS 1.0%CVE-2025-3992HIGHTOTOLINK N150RT formWlwds buffer overflowEPSS 1.0%CVE-2025-11444HIGHTOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflowEPSS 1.0%CVE-2022-32140MEDIUMCODESYS runtime system prone to denial of service due to buffer copyEPSS 1.0%CVE-2025-24266CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS VenturaEPSS 1.0%CVE-2022-25514—stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has dEPSS 1.0%CVE-2021-33720—A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variantsEPSS 1.0%CVE-2025-8245HIGHTOTOLINK X15 HTTP POST Request formMultiAPVLAN buffer overflowEPSS 1.0%CVE-2021-33974HIGHQihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/) is affected by: BuffEPSS 1.0%CVE-2024-33773MEDIUMA buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigEPSS 1.0%CVE-2025-4114HIGHNetgear JWNR2000v2 check_language_file buffer overflowEPSS 1.0%CVE-2025-10838HIGHTenda AC21 WifiExtraSet sub_45BB10 buffer overflowEPSS 1.0%CVE-2025-8243HIGHTOTOLINK X15 HTTP POST Request formMapDel buffer overflowEPSS 1.0%CVE-2021-40241CRITICALxfig 3.2.7 is vulnerable to Buffer Overflow.EPSS 1.0%