Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-11651HIGHUTT 进取 518G formRemoteControl sub_4247AC buffer overflowEPSS 0.8%CVE-2023-27705HIGHAPNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png.EPSS 0.8%CVE-2025-41769CRITICALUnauthenticated Buffer Overflow in PROFINET ServiceEPSS 0.8%CVE-2025-4896HIGHTenda AC10 UserCongratulationsExec buffer overflowEPSS 0.8%CVE-2025-11652HIGHUTT 进取 518G formTaskEdit_ap buffer overflowEPSS 0.8%CVE-2024-37047MEDIUMQTS, QuTS heroEPSS 0.8%CVE-2024-37049MEDIUMQTS, QuTS heroEPSS 0.8%CVE-2024-37050MEDIUMQTS, QuTS heroEPSS 0.8%CVE-2026-7218HIGHTotolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflowEPSS 0.8%CVE-2026-7219HIGHTotolink N300RT formIpQoS buffer overflowEPSS 0.8%CVE-2025-1896HIGHTenda TX3 SetStaticRouteCfg buffer overflowEPSS 0.8%CVE-2025-1898HIGHTenda TX3 openSchedWifi buffer overflowEPSS 0.8%CVE-2024-33278CRITICALBuffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbitrarEPSS 0.8%CVE-2026-45100CRITICALOpenSIPS: Buffer Overflow in Base64 Encode TransformationEPSS 0.8%CVE-2023-44832HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vuEPSS 0.8%CVE-2022-45652CRITICALTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function.EPSS 0.8%CVE-2025-10815HIGHTenda AC20 HTTP POST Request SetPptpServerCfg strcpy buffer overflowEPSS 0.8%CVE-2022-45651CRITICALTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the formSetVirtualSer function.EPSS 0.8%CVE-2025-11355HIGHUTT 1250GW aspChangeChannel strcpy buffer overflowEPSS 0.8%CVE-2024-12988MEDIUMNetgear R6900P/R7000P HTTP Header sub_16C4C buffer overflowEPSS 0.8%