Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2023-28508—Heap corruption in UniRPC serviceEPSS 0.9%CVE-2025-22946CRITICALTenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitraryEPSS 0.9%CVE-2025-8939HIGHTenda AC20 WifiGuestSet buffer overflowEPSS 0.9%CVE-2023-27065HIGHTenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelEPSS 0.9%CVE-2023-27062HIGHTenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulneEPSS 0.9%CVE-2023-27064HIGHTenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnEPSS 0.9%CVE-2025-15428HIGHUTT 进取 512W formRemoteControl strcpy buffer overflowEPSS 0.9%CVE-2025-43441MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOSEPSS 0.9%CVE-2025-6940HIGHTOTOLINK A702R HTTP POST Request formParentControl buffer overflowEPSS 0.9%CVE-2022-23477CRITICALBuffer Overflow in xrdpEPSS 0.9%CVE-2022-23479CRITICALBuffer Overflow occurs in xrdpEPSS 0.9%CVE-2022-23480CRITICALBuffer Overflow in xrdpEPSS 0.9%CVE-2025-15461HIGHUTT 进取 520W formTaskEdit strcpy buffer overflowEPSS 0.9%CVE-2025-15429HIGHUTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflowEPSS 0.9%CVE-2025-6953HIGHTOTOLINK A3002RU HTTP POST Request formParentControl buffer overflowEPSS 0.9%CVE-2024-38541HIGHof: module: add buffer overflow check in of_modalias()EPSS 0.9%CVE-2024-23972MEDIUMSony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-32674CRITICALCertain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.EPSS 0.9%CVE-2023-43131CRITICALGeneral Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.EPSS 0.9%CVE-2025-6939HIGHTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%