Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-6336HIGHTOTOLINK EX1200T HTTP POST Request formTmultiAP buffer overflowEPSS 0.9%CVE-2024-29159CRITICALHDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causinEPSS 0.9%CVE-2022-35021MEDIUMOTFCC commit 617837b was discovered to contain a global buffer overflow via /release-x64/otfccdump+0x718693.EPSS 0.9%CVE-2024-35823MEDIUMvt: fix unicode buffer corruption when deleting charactersEPSS 0.9%CVE-2025-5793HIGHTOTOLINK EX1200T HTTP POST Request formPortFw buffer overflowEPSS 0.9%CVE-2021-3182HIGHD-Link DCS-5220 devices have a buffer overflow. NOTE: This vulnerability only affects products that are no longer supported by the maintaineEPSS 0.9%CVE-2024-24451HIGHA stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackerEPSS 0.9%CVE-2025-6881HIGHD-Link DI-8100 jhttpd pppoe_base.asp buffer overflowEPSS 0.9%CVE-2023-28506HIGHStack buffer overflow in UniRPC serviceEPSS 0.9%CVE-2024-29506MEDIUMArtifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.EPSS 0.9%CVE-2022-45997HIGHTenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.EPSS 0.9%CVE-2023-36321HIGHConnected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.cEPSS 0.9%CVE-2023-46284HIGHA vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIEPSS 0.9%CVE-2023-46283HIGHA vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIEPSS 0.9%CVE-2022-27612HIGHBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4EPSS 0.9%CVE-2024-34945CRITICALTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizaEPSS 0.9%CVE-2023-4264HIGHPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemEPSS 0.9%CVE-2024-2452HIGHInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()EPSS 0.9%CVE-2023-44831HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. This vuEPSS 0.9%CVE-2023-27971CRITICALCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.EPSS 0.9%