Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-6939HIGHTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%CVE-2021-21969LOWAn out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. ThEPSS 0.9%CVE-2025-0960CRITICALAutomationDirect C-more EA9 HMI Classic Buffer OverflowEPSS 0.9%CVE-2026-30650HIGHA post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of VivEPSS 0.9%CVE-2022-39343MEDIUMAzure RTOS FileX vulnerable to Buffer OfferflowEPSS 0.9%CVE-2021-21970LOWAn out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. ThEPSS 0.9%CVE-2022-34886HIGHA remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing aEPSS 0.9%CVE-2023-43010HIGHThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS EPSS 0.9%CVE-2025-20115HIGHCisco IOS XR Software Border Gateway Protocol Denial of Service VulnerabilityEPSS 0.9%CVE-2026-27459HIGHpyOpenSSL DTLS cookie callback buffer overflowEPSS 0.9%CVE-2023-49208CRITICALscheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registrEPSS 0.9%CVE-2023-22917HIGHA buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firEPSS 0.9%CVE-2019-16536HIGHStack overflow leading to DoS can be triggered by a malicious authenticated client.EPSS 0.9%CVE-2023-26319MEDIUMXiaomi Router administration interface vulnerability leads command injection and stack overflowEPSS 0.9%CVE-2025-13288HIGHTenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflowEPSS 0.9%CVE-2024-48406CRITICALBuffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the pEPSS 0.9%CVE-2024-39769CRITICALMultiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 0.9%CVE-2024-39802CRITICALMultiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 0.9%CVE-2024-25139CRITICALIn TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffeEPSS 0.9%CVE-2022-49058CRITICALcifs: potential buffer overflow in handling symlinksEPSS 0.9%