Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-3727MEDIUMPCMan FTP Server STATUS Command buffer overflowEPSS 0.8%CVE-2025-3373MEDIUMPCMan FTP Server SITE CHMOD Command buffer overflowEPSS 0.8%CVE-2026-1143HIGHTOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg buffer overflowEPSS 0.7%CVE-2026-7069HIGHD-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflowEPSS 0.7%CVE-2021-21967MEDIUMAn out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A speciaEPSS 0.7%CVE-2023-46565HIGHBuffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of seEPSS 0.7%CVE-2024-50999MEDIUMNetgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulEPSS 0.7%CVE-2024-52949HIGHiptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is coEPSS 0.7%CVE-2025-53888MEDIUMRIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.cEPSS 0.7%CVE-2024-41631HIGHBuffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h componeEPSS 0.7%CVE-2026-29009HIGHU-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINKEPSS 0.7%CVE-2025-13258HIGHTenda AC20 WifiExtraSet buffer overflowEPSS 0.7%CVE-2025-15217HIGHTenda AC23 HTTP POST Request formSetPPTPUserList buffer overflowEPSS 0.7%CVE-2025-67186CRITICALTOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firEPSS 0.7%CVE-2024-34196HIGHTotolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The "boa" progEPSS 0.7%CVE-2025-5672HIGHTOTOLINK N302R Plus HTTP POST Request formFilter buffer overflowEPSS 0.7%CVE-2025-5671HIGHTOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflowEPSS 0.7%CVE-2025-5737HIGHTOTOLINK X15 HTTP POST Request formDosCfg buffer overflowEPSS 0.7%CVE-2025-5789HIGHTOTOLINK X15 HTTP POST Request formPortFw buffer overflowEPSS 0.7%CVE-2025-5738HIGHTOTOLINK X15 HTTP POST Request formStats buffer overflowEPSS 0.7%