Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-6137HIGHTOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflowEPSS 1.0%CVE-2025-6824HIGHTOTOLINK X15 HTTP POST Request formParentControl buffer overflowEPSS 1.0%CVE-2026-40170HIGHngtcp2 has a qlog transport parameter serialization stack buffer overflowEPSS 1.0%CVE-2025-4120HIGHNetgear JWNR2000v2 sub_4238E8 buffer overflowEPSS 1.0%CVE-2025-14139MEDIUMUTT 进取 520W formConfigDnsFilterGlobal strcpy buffer overflowEPSS 1.0%CVE-2025-5736HIGHTOTOLINK X15 HTTP POST Request formNtp buffer overflowEPSS 0.9%CVE-2025-5735HIGHTOTOLINK X15 HTTP POST Request formSetLg buffer overflowEPSS 0.9%CVE-2025-5734HIGHTOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflowEPSS 0.9%CVE-2021-22275HIGHDenial of service vulnerability on Automation Runtime webserverEPSS 0.9%CVE-2022-36587CRITICALIn Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.EPSS 0.9%CVE-2025-25530CRITICALBuffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to savinEPSS 0.9%CVE-2025-10034HIGHD-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflowEPSS 0.9%CVE-2025-4115HIGHNetgear JWNR2000v2 default_version_is_new buffer overflowEPSS 0.9%CVE-2023-39454HIGHBuffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.EPSS 0.9%CVE-2025-4116HIGHNetgear JWNR2000v2 get_cur_lang_ver buffer overflowEPSS 0.9%CVE-2025-15462HIGHUTT 进取 520W ConfigAdvideo strcpy buffer overflowEPSS 0.9%CVE-2022-26648HIGHA vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE EPSS 0.9%CVE-2022-48196HIGHCertain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1EPSS 0.9%CVE-2025-6734HIGHUTT HiPER 840G API formP2PLimitConfig sub_484E40 buffer overflowEPSS 0.9%CVE-2025-6733HIGHUTT HiPER 840G API formConfigDnsFilterGlobal sub_416928 buffer overflowEPSS 0.9%