Weaknesses of type CWE-120

3,246 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-23219CRITICALThe deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argEPSS 4.7%CVE-2021-22934—A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device EPSS 4.7%CVE-2016-8620MEDIUMThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled inEPSS 4.7%CVE-2018-14879HIGHThe command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().EPSS 4.7%CVE-2021-40709HIGHAdobe Photoshop Buffer Overflow leads to Arbitrary Code ExecutionEPSS 4.6%CVE-2026-7856HIGHD-Link DI-8100 Web Management url_member.asp buffer overflowEPSS 4.6%CVE-2025-10443HIGHTenda AC9/AC15 exeCommand formexeCommand buffer overflowEPSS 4.6%CVE-2018-1054—An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4EPSS 4.6%CVE-2019-5143HIGHAn exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13EPSS 4.5%CVE-2025-10385HIGHMercury KM08-708H GiGA WiFi Wave2 mcr_setSysAdm sub_450B2C buffer overflowEPSS 4.5%CVE-2022-23188HIGHAdobe Illustrator Buffer Overflow could lead to Arbitrary code executionEPSS 4.4%CVE-2022-23187HIGHAdobe Illustrator 2022 Buffer Overflow could lead to Arbitrary code executionEPSS 4.3%CVE-2020-6087HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENTEPSS 4.3%CVE-2020-6085HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 4.3%CVE-2020-6084HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 4.3%CVE-2020-6086HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENTEPSS 4.3%CVE-2025-29032MEDIUMTenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.EPSS 4.2%CVE-2021-45039CRITICALMultiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCMN) EPSS 4.2%CVE-2020-6083HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENTEPSS 4.2%CVE-2019-3705HIGHBuffer Overflow VulnerabilityEPSS 4.2%