Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2020-8252—The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which EPSS 0.7%CVE-2023-4259HIGHPotential buffer overflow vulnerabilities in the Zephyr eS-WiFi driverEPSS 0.7%CVE-2024-39750HIGHIBM Analytics Content Hub buffer overflowEPSS 0.7%CVE-2025-3194HIGHVersions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this EPSS 0.7%CVE-2023-45929CRITICALS-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().EPSS 0.7%CVE-2025-25343CRITICALTenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.EPSS 0.7%CVE-2023-28772MEDIUMAn issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.EPSS 0.7%CVE-2026-18103MEDIUMDhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapiEPSS 0.7%CVE-2025-4181MEDIUMPCMan FTP Server SEND Command buffer overflowEPSS 0.7%CVE-2025-5110MEDIUMFreeFloat FTP Server VERBOSE Command buffer overflowEPSS 0.7%CVE-2025-4158MEDIUMPCMan FTP Server PROMPT Command buffer overflowEPSS 0.7%CVE-2025-4159MEDIUMPCMan FTP Server GLOB Command buffer overflowEPSS 0.7%CVE-2025-4180MEDIUMPCMan FTP Server TRACE Command buffer overflowEPSS 0.7%CVE-2025-4162MEDIUMPCMan FTP Server ASCII Command buffer overflowEPSS 0.7%CVE-2025-5634MEDIUMPCMan FTP Server NOOP Command buffer overflowEPSS 0.7%CVE-2025-4160MEDIUMPCMan FTP Server LS Command buffer overflowEPSS 0.7%CVE-2025-4792MEDIUMFreeFloat FTP Server MDELETE Command buffer overflowEPSS 0.7%CVE-2025-4182MEDIUMPCMan FTP Server BELL Command buffer overflowEPSS 0.7%CVE-2026-75124HIGHPLANET GS-4210-16P2S V3 Memory Corruption via dispatcher.cgi _readHttpParamEPSS 0.7%CVE-2025-4183MEDIUMPCMan FTP Server RECV Command buffer overflowEPSS 0.7%