Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2021-21808HIGHA memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft ImageGear 19.9. A specially crafted malforEPSS 1.0%CVE-2025-5875HIGHTP-LINK Technologies TL-IPC544EP-W4 main sub_69064 buffer overflowEPSS 1.0%CVE-2021-29094MEDIUMArcGIS Server image service and raster analytics security update: buffer overflowEPSS 1.0%CVE-2023-24169CRITICALTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c.EPSS 1.0%CVE-2022-20846MEDIUMCisco IOS XR Software Cisco Discovery Protocol Buffer Overflow VulnerabilityEPSS 1.0%CVE-2023-0617HIGHTRENDNet TEW-811DRU httpd guestnetwork.asp buffer overflowEPSS 1.0%CVE-2025-11338HIGHD-Link DI-7100G C1 jhttpd login.cgi sub_4C0990 buffer overflowEPSS 1.0%CVE-2025-43214MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOEPSS 1.0%CVE-2024-51139CRITICALBuffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and eaEPSS 1.0%CVE-2025-9006HIGHTenda CH22 delFileName formdelFileName buffer overflowEPSS 1.0%CVE-2021-21282HIGHBuffer overflow in RPL source routing header processingEPSS 1.0%CVE-2021-0283HIGHJunos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)EPSS 1.0%CVE-2021-0284HIGHJunos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)EPSS 1.0%CVE-2025-5839HIGHTenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.0%CVE-2025-5852HIGHTenda AC6 setPptpUserList formSetPPTPUserList buffer overflowEPSS 1.0%CVE-2025-5862HIGHTenda AC7 setPptpUserList formSetPPTPUserList buffer overflowEPSS 1.0%CVE-2022-24788HIGHBuffer overflow in VyperEPSS 1.0%CVE-2025-12234HIGHTenda CH22 SafeMacFilter fromSafeMacFilter buffer overflowEPSS 1.0%CVE-2025-7077HIGHShenzhen Libituo Technology LBT-T300-T310 appy.cgi config_3g_para buffer overflowEPSS 1.0%CVE-2026-4565HIGHTenda AC21 SetNetControlList formSetQosBand buffer overflowEPSS 1.0%