Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-5595MEDIUMFreeFloat FTP Server PROGRESS Command buffer overflowEPSS 0.7%CVE-2025-5666MEDIUMFreeFloat FTP Server XMKD Command buffer overflowEPSS 0.7%CVE-2025-5664MEDIUMFreeFloat FTP Server RESTART Command buffer overflowEPSS 0.7%CVE-2024-5412HIGHA buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenEPSS 0.7%CVE-2025-5665MEDIUMFreeFloat FTP Server XCWD Command buffer overflowEPSS 0.7%CVE-2024-34198CRITICALTOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa proEPSS 0.7%CVE-2025-9812HIGHTenda CH22 exeCommand formexeCommand buffer overflowEPSS 0.7%CVE-2026-30075HIGHOpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response contaEPSS 0.7%CVE-2022-4857MEDIUMModbus Tools Modbus Poll mbp File mbpoll.exe buffer overflowEPSS 0.7%CVE-2026-93741CRITICALTotolink A3002MU formWlWds buffer overflowEPSS 0.7%CVE-2023-26109HIGHAll versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to impropeEPSS 0.7%CVE-2024-10964MEDIUMemqx neuron plugin_handle.c handle_add_plugin buffer overflowEPSS 0.7%CVE-2025-12274HIGHTenda CH22 P2pListFilter fromP2pListFilter buffer overflowEPSS 0.7%CVE-2026-82770HIGHBuffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's webEPSS 0.7%CVE-2026-82772HIGHBuffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web seEPSS 0.7%CVE-2026-27942LOWfast-xml-parser has stack overflow in XMLBuilder with preserveOrderEPSS 0.7%CVE-2024-49778HIGHA heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service (DoS) and Code ExecuEPSS 0.7%CVE-2023-22416HIGHJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is receivedEPSS 0.7%CVE-2024-21274HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected EPSS 0.7%CVE-2025-67188CRITICALA buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /liEPSS 0.7%