Weaknesses of type CWE-120

3,164 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2025-52909CRITICALAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580EPSS 0.5%CVE-2023-24584HIGHController 6000 buffer overflow via upload feature in web interfaceEPSS 0.5%CVE-2019-25232HIGHNetPCLinker 1.0.0.0 - Buffer OverflowEPSS 0.5%CVE-2026-28931HIGHA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6,EPSS 0.5%CVE-2023-48704HIGHUnauthenticated heap buffer overflow in Gorrila codec decompressionEPSS 0.5%CVE-2023-37245—Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availaEPSS 0.5%CVE-2025-26002CRITICALTelesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSynEPSS 0.5%CVE-2026-44436HIGHQuicly is vulnerable to connection state corruptionEPSS 0.5%CVE-2025-50670HIGHA buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint. AnEPSS 0.5%CVE-2024-42642MEDIUMMicron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially craftedEPSS 0.5%CVE-2022-23085CRITICALPotential jail escape vulnerabilities in netmapEPSS 0.5%CVE-2021-47815MEDIUMNsauditor 3.2.3 - Denial of Service (PoC)EPSS 0.5%CVE-2018-25125HIGHNetis DL4322D RTK 2.1.1 FTP Service DoSEPSS 0.5%CVE-2024-53379HIGHHeap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version (from 05/05/24) commit 64808a5e12EPSS 0.5%CVE-2023-4263HIGHPotential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driverEPSS 0.5%CVE-2020-37010HIGHBearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)EPSS 0.5%CVE-2025-28019HIGHTOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi componentEPSS 0.5%CVE-2023-53874MEDIUMGOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset NameEPSS 0.5%CVE-2024-6918HIGHCWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause a crash of the AccutecEPSS 0.5%CVE-2020-37130MEDIUMNsauditor 3.2.0.0 - 'Name' Denial of ServiceEPSS 0.5%