Falhas do tipo CWE-120

3.163 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2011-10005MEDIUMEasyFTP MKD Command buffer overflowEPSS 3.5%CVE-2022-21716HIGHBuffer Overflow in TwistedEPSS 3.5%CVE-2025-55131HIGHA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module witEPSS 3.5%CVE-2023-6175HIGHBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in WiresharkEPSS 3.5%CVE-2020-6088HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 3.5%CVE-2023-1424CRITICALDenial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU moduleEPSS 3.4%CVE-2026-0640HIGHTenda AC23 PowerSaveSet sscanf buffer overflowEPSS 3.4%CVE-2020-10071CRITICALInsufficient publish message length validation in MQTTEPSS 3.4%CVE-2021-27391CRITICALA vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versionsEPSS 3.4%CVE-2016-9428HIGHAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3EPSS 3.3%CVE-2025-10666HIGHD-Link DIR-825 apply.cgi sub_4106d4 buffer overflowEPSS 3.3%CVE-2020-5208HIGHremote code execution vulnerability in ipmitoolEPSS 3.3%CVE-2017-20005CRITICALNGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 thatEPSS 3.3%CVE-2022-20841CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 3.3%CVE-2025-15218HIGHTenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflowEPSS 3.3%CVE-2026-3168HIGHTenda F453 httpd NatStaticSetting fromNatStaticSetting buffer overflowEPSS 3.2%CVE-2026-3399HIGHTenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 3.2%CVE-2025-10792HIGHD-Link DIR-513 formWPS buffer overflowEPSS 3.2%CVE-2020-6017—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegmentEPSS 3.2%CVE-2020-6018—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::DecryEPSS 3.2%