Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2026-71940HIGHDrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACEEPSS 0.7%CVE-2023-46566HIGHBuffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker to cause a denial oEPSS 0.7%CVE-2026-71939HIGHDrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACEEPSS 0.7%CVE-2026-71911HIGHDrayTek VigorAP Multiple Models Buffer Overflow via setLanEPSS 0.7%CVE-2026-71937HIGHDrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profileEPSS 0.7%CVE-2026-71934HIGHDrayTek VigorSwitch Multiple Models Buffer Overflow via pingtraceEPSS 0.7%CVE-2025-12611HIGHTenda AC21 SetPptpServerCfg formSetPPTPServer buffer overflowEPSS 0.7%CVE-2026-71936HIGHDrayTek VigorSwitch Multiple Models Buffer Overflow via sysrebootEPSS 0.7%CVE-2026-44756CRITICALMemory Corruption vulnerability in SAP Extended Passport (EPP) ProcessingEPSS 0.7%CVE-2023-20007MEDIUMA vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers EPSS 0.7%CVE-2026-43994HIGHCoturn: Stack buffer overflow in decode_oauth_token_gcm()EPSS 0.7%CVE-2020-9063—NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the cEPSS 0.7%CVE-2024-46478CRITICALHTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.EPSS 0.7%CVE-2025-5596MEDIUMFreeFloat FTP Server REGET Command buffer overflowEPSS 0.7%CVE-2025-1147LOWGNU Binutils nm nm.c internal_strlen buffer overflowEPSS 0.7%CVE-2024-37637CRITICALTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.EPSS 0.7%CVE-2025-5551MEDIUMFreeFloat FTP Server SYSTEM Command buffer overflowEPSS 0.7%CVE-2025-5594MEDIUMFreeFloat FTP Server SET Command buffer overflowEPSS 0.7%CVE-2025-5636MEDIUMPCMan FTP Server SET Command buffer overflowEPSS 0.7%CVE-2025-5637MEDIUMPCMan FTP Server SYSTEM Command buffer overflowEPSS 0.7%