Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-6732HIGHUTT HiPER 840G API setSysAdm strcpy buffer overflowEPSS 0.9%CVE-2023-22922HIGHA buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated atEPSS 0.9%CVE-2025-12273HIGHTenda CH22 webExcptypemanFilter fromwebExcptypemanFilter buffer overflowEPSS 0.9%CVE-2024-33874CRITICALHDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.EPSS 0.9%CVE-2024-50305HIGHApache Traffic Server: Valid Host field value can cause crashesEPSS 0.9%CVE-2021-37311HIGHBuffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the application's listeniEPSS 0.9%CVE-2025-12271HIGHTenda CH22 RouteStatic fromRouteStatic buffer overflowEPSS 0.9%CVE-2025-6568HIGHTOTOLINK EX1200T HTTP POST Request formIpv6Setup buffer overflowEPSS 0.9%CVE-2023-26076HIGHAn issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5EPSS 0.9%CVE-2024-20267HIGHA vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netsEPSS 0.9%CVE-2015-10065MEDIUMAenBleidd FiND my_validator.cpp init_result buffer overflowEPSS 0.9%CVE-2025-6129HIGHTOTOLINK EX1200T HTTP POST Request formSaveConfig buffer overflowEPSS 0.9%CVE-2025-6825HIGHTOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%CVE-2024-29646CRITICALBuffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.EPSS 0.9%CVE-2026-1155HIGHTotolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflowEPSS 0.9%CVE-2020-11068MEDIUMPotential Buffer Overflow in LoRaMac-nodeEPSS 0.9%CVE-2023-23364HIGHMultimedia ConsoleEPSS 0.9%CVE-2023-23363HIGHQTSEPSS 0.9%CVE-2022-50922HIGHAudio Conversion Wizard v2.01 - Buffer OverflowEPSS 0.9%CVE-2021-21281HIGHBuffer overflow due to unvalidated TCP data offsetEPSS 0.9%