Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2020-16232LOWYokogawa WideField3 Buffer Copy Without Checking Size of InputEPSS 0.7%CVE-2026-43807CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS EPSS 0.7%CVE-2025-11091HIGHTenda AC21 SetStaticRouteCfg sscanf buffer overflowEPSS 0.7%CVE-2025-14656HIGHTenda AC20 openSchedWifi httpd buffer overflowEPSS 0.7%CVE-2025-5331MEDIUMPCMan FTP Server NLST Command buffer overflowEPSS 0.7%CVE-2024-27628HIGHBuffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.EPSS 0.7%CVE-2025-9007HIGHTenda CH22 editFileName formeditFileName buffer overflowEPSS 0.7%CVE-2025-4790MEDIUMFreeFloat FTP Server GLOB Command buffer overflowEPSS 0.7%CVE-2025-4789MEDIUMFreeFloat FTP Server LCD Command buffer overflowEPSS 0.7%CVE-2025-4791MEDIUMFreeFloat FTP Server HASH Command buffer overflowEPSS 0.7%CVE-2025-4788MEDIUMFreeFloat FTP Server DELETE Command buffer overflowEPSS 0.7%CVE-2024-0144MEDIUMNVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2EPSS 0.7%CVE-2024-40568CRITICALBuffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute aEPSS 0.7%CVE-2023-4055—When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent witEPSS 0.7%CVE-2024-53334HIGHTOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi.EPSS 0.7%CVE-2025-13549HIGHD-Link DIR-822K formNtp sub_455524 buffer overflowEPSS 0.7%CVE-2025-6751HIGHLinksys E8450 HTTP POST Request portal.cgi set_device_language buffer overflowEPSS 0.7%CVE-2024-44555CRITICALTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.EPSS 0.7%CVE-2024-30602CRITICALTenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.EPSS 0.7%CVE-2025-12322HIGHTenda CH22 NatStaticSetting fromNatStaticSetting buffer overflowEPSS 0.7%