Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2026-20889CRITICALA heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted maliciEPSS 0.8%CVE-2026-9294HIGHEdimax BR-6428NS POST Request formWanTcpipSetup buffer overflowEPSS 0.8%CVE-2026-13562HIGHEdimax EW-7478APC POST Request formiNICSiteSurvey buffer overflowEPSS 0.8%CVE-2026-9295HIGHEdimax BR-6428NS POST Request formWirelessTbl buffer overflowEPSS 0.8%CVE-2022-23468MEDIUMBuffer Overflow in xrdpEPSS 0.8%CVE-2011-10022HIGHSPlayer 3.7 Content-Type Header Buffer OverflowEPSS 0.8%CVE-2021-47347HIGHwl1251: Fix possible buffer overflow in wl1251_cmd_scanEPSS 0.8%CVE-2026-39255CRITICALBuffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dyEPSS 0.8%CVE-2026-30141CRITICALAn issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a deniaEPSS 0.8%CVE-2025-11385HIGHTenda AC20 fast_setting_wifi_set sscanf buffer overflowEPSS 0.8%CVE-2026-39254CRITICALBuffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dyEPSS 0.8%CVE-2022-41793CRITICALAn out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A speciallEPSS 0.8%CVE-2026-17040CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.8%CVE-2020-5210MEDIUMNetHack command line -w option parsing is subject to a buffer overflowEPSS 0.8%CVE-2023-22924MEDIUMA buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attaEPSS 0.8%CVE-2025-11356HIGHTenda AC23 SetStaticRouteCfg sscanf buffer overflowEPSS 0.8%CVE-2025-11117HIGHTenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflowEPSS 0.8%CVE-2025-10803HIGHTenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflowEPSS 0.8%CVE-2025-12619HIGHTenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflowEPSS 0.8%CVE-2024-8076HIGHTOTOLINK AC1200 T8 setDiagnosisCfg buffer overflowEPSS 0.8%