Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2023-44835HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function. This vuEPSS 0.9%CVE-2023-44834HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function. TEPSS 0.9%CVE-2023-44833HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function. ThiEPSS 0.9%CVE-2026-0836HIGHUTT 进取 520W formConfigFastDirectionW strcpy buffer overflowEPSS 0.9%CVE-2025-15459HIGHUTT 进取 520W formUser strcpy buffer overflowEPSS 0.9%CVE-2025-7747HIGHTenda FH451 POST Request WizardHandle fromWizardHandle buffer overflowEPSS 0.9%CVE-2026-48686CRITICALFastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) dEPSS 0.9%CVE-2026-49759HIGHStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashEPSS 0.9%CVE-2025-31700HIGHA vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted maliEPSS 0.9%CVE-2025-5156HIGHH3C GR-5400AX aspForm EditWlanMacList buffer overflowEPSS 0.9%CVE-2026-90780HIGHSIPp through 3.7.7 Buffer Overflow via Oversized SIP Header ContentEPSS 0.9%CVE-2026-67858HIGHBuffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled throEPSS 0.9%CVE-2026-90778HIGHSIPp through 3.7.7 Buffer Overflow via SIP To Header TagEPSS 0.9%CVE-2024-41660CRITICALslpd-lite unauthenticated memory corruptionEPSS 0.9%CVE-2025-9303HIGHTOTOLINK A720R cstecgi.cgi setParentalRules buffer overflowEPSS 0.9%CVE-2025-7116HIGHUTT 进取 750W Fast_wireless_conf buffer overflowEPSS 0.9%CVE-2025-7117HIGHUTT HiPER 840G websWhiteList buffer overflowEPSS 0.9%CVE-2025-7571HIGHUTT HiPER 840G aspApBasicConfigUrcp buffer overflowEPSS 0.9%CVE-2023-0612HIGHTRENDnet TEW-811DRU httpd basic.asp buffer overflowEPSS 0.9%CVE-2025-1852HIGHTotolink EX1800T cstecgi.cgi loginAuth buffer overflowEPSS 0.9%