Weaknesses of type CWE-120

3,163 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2021-36075HIGHAdobe Bridge Buffer Overflow leads to Arbitrary Code ExecutionEPSS 5.6%CVE-2023-28769CRITICALThe buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.EPSS 5.4%CVE-2024-54887HIGHTP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userEPSS 5.4%CVE-2019-5439—A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.EPSS 5.3%CVE-2021-42731HIGHAdobe Indesign Buffer Overflow Could Lead to Remote Code ExecutionEPSS 5.2%CVE-2019-6557—Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.EPSS 5.0%CVE-2025-45859MEDIUMTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interfacEPSS 5.0%CVE-2025-12618HIGHTenda AC8 DatabaseIniSet buffer overflowEPSS 5.0%CVE-2019-15166LOWlmp_print in tcpdump lacks certain boundary checksEPSS 5.0%CVE-2024-29195MEDIUMAzure C SDK Integer Wraparound VulnerabilityEPSS 5.0%CVE-2024-12343HIGHTP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflowEPSS 5.0%CVE-2025-6151HIGHTP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflowEPSS 5.0%CVE-2022-23203HIGHAdobe Photoshop Buffer Overflow could lead to Arbitrary code executionEPSS 4.9%CVE-2025-45864MEDIUMTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interfaEPSS 4.9%CVE-2025-12235HIGHTenda CH22 SetIpBind fromSetIpBind buffer overflowEPSS 4.8%CVE-2025-10953HIGHUTT 1200GW/1250GW formApMail buffer overflowEPSS 4.8%CVE-2022-23218CRITICALThe deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path arguEPSS 4.7%CVE-2025-6627HIGHTOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflowEPSS 4.7%CVE-2021-22934—A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device EPSS 4.7%CVE-2018-14879HIGHThe command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().EPSS 4.7%