Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-5550MEDIUMFreeFloat FTP Server PBSZ Command buffer overflowEPSS 0.7%CVE-2025-5592MEDIUMFreeFloat FTP Server PASSIVE Command buffer overflowEPSS 0.7%CVE-2024-37637CRITICALTOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.EPSS 0.7%CVE-2025-5547MEDIUMFreeFloat FTP Server CDUP Command buffer overflowEPSS 0.7%CVE-2025-5596MEDIUMFreeFloat FTP Server REGET Command buffer overflowEPSS 0.7%CVE-2023-6711MEDIUMVulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially EPSS 0.7%CVE-2024-46601HIGHElspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow.EPSS 0.7%CVE-2025-5667MEDIUMFreeFloat FTP Server REIN Command buffer overflowEPSS 0.7%CVE-2026-48490MEDIUMArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handlerEPSS 0.7%CVE-2023-34336HIGHAMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may EPSS 0.7%CVE-2026-4689CRITICALSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentEPSS 0.7%CVE-2026-84609CRITICALA permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS SeEPSS 0.7%CVE-2024-49777HIGHA heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service (DoS), Information DEPSS 0.7%CVE-2025-9781HIGHTOTOLINK A702R formFilter sub_4162DC buffer overflowEPSS 0.7%CVE-2025-9779HIGHTOTOLINK A702R formFilter sub_4162DC buffer overflowEPSS 0.7%CVE-2025-9782HIGHTOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflowEPSS 0.7%CVE-2025-9783HIGHTOTOLINK A702R formParentControl sub_418030 buffer overflowEPSS 0.7%CVE-2025-9780HIGHTOTOLINK A702R formIpQoS sub_419BE0 buffer overflowEPSS 0.7%CVE-2024-42545CRITICALTOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function.EPSS 0.7%CVE-2024-42543HIGHTOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.EPSS 0.7%