Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-11408HIGHD-Link DI-7001 MINI dbsrv.asp buffer overflowEPSS 0.9%CVE-2025-9813HIGHTenda CH22 SetSambaConf formSetSambaConf buffer overflowEPSS 0.9%CVE-2026-2067HIGHUTT 进取 520W formTimeGroupConfig strcpy buffer overflowEPSS 0.9%CVE-2025-24209HIGHA buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17EPSS 0.9%CVE-2025-7914HIGHTenda AC6 httpd setparentcontrolinfo buffer overflowEPSS 0.9%CVE-2020-23257HIGHBuffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMaEPSS 0.9%CVE-2023-32975MEDIUMQTS, QuTS heroEPSS 0.9%CVE-2023-4257HIGHUnchecked user input length in the Zephyr WiFi shell moduleEPSS 0.9%CVE-2024-32664MEDIUMSuricata's base64 contains an out of bounds writeEPSS 0.9%CVE-2023-5753MEDIUMPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemEPSS 0.9%CVE-2023-49468HIGHLibde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc.EPSS 0.9%CVE-2025-10756HIGHUTT HiPER 840G getOneApConfTempEntry buffer overflowEPSS 0.9%CVE-2022-24023CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 0.9%CVE-2025-8940HIGHTenda AC20 saveParentControlInfo strcpy buffer overflowEPSS 0.9%CVE-2024-30259HIGHFastDDS heap buffer overflow when publisher sends malformed packetEPSS 0.9%CVE-2023-44834HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function. TEPSS 0.9%CVE-2023-44829HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. TEPSS 0.9%CVE-2025-1895HIGHTenda TX3 setMacFilterCfg buffer overflowEPSS 0.9%CVE-2023-44837HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function. This vulnEPSS 0.9%CVE-2023-44833HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function. ThiEPSS 0.9%