Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2026-4565HIGHTenda AC21 SetNetControlList formSetQosBand buffer overflowEPSS 1.0%CVE-2026-1139HIGHUTT 进取 520W ConfigExceptMSN strcpy buffer overflowEPSS 1.0%CVE-2026-1138HIGHUTT 进取 520W ConfigExceptQQ strcpy buffer overflowEPSS 1.0%CVE-2020-6999—In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text is the correct size EPSS 1.0%CVE-2022-36361CRITICALA vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versionEPSS 1.0%CVE-2006-6024CRITICALMultiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack vectors, as demonstrateEPSS 1.0%CVE-2024-9783HIGHD-Link DIR-619L B1 formLogDnsquery buffer overflowEPSS 1.0%CVE-2024-9784HIGHD-Link DIR-619L B1 formResetStatistic buffer overflowEPSS 1.0%CVE-2025-29329CRITICALBuffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4.121.0 allows remote attacker to execute EPSS 1.0%CVE-2023-26320HIGHXiaomi Router external request interface vulnerability leads to stack overflowEPSS 1.0%CVE-2026-1137HIGHUTT 进取 520W formWebAuthGlobalConfig strcpy buffer overflowEPSS 1.0%CVE-2025-66647LOWRIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reassEPSS 1.0%CVE-2025-11305HIGHUTT HiPER 840G formTaskEdit strcpy buffer overflowEPSS 1.0%CVE-2025-46060CRITICALBuffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FILEPSS 1.0%CVE-2024-33453HIGHBuffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component.EPSS 1.0%CVE-2022-20687MEDIUMMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmwareEPSS 1.0%CVE-2025-12265HIGHTenda CH22 VirtualSer fromVirtualSer buffer overflowEPSS 1.0%CVE-2025-6400HIGHTOTOLINK N300RH HTTP POST Message formPortFw buffer overflowEPSS 1.0%CVE-2025-6164HIGHTOTOLINK A3002R HTTP POST Request formMultiAP buffer overflowEPSS 1.0%CVE-2025-5794HIGHTenda AC5 setPptpUserList formSetPPTPUserList buffer overflowEPSS 1.0%