Falhas do tipo CWE-120

3.163 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-12686CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-6EPSS 2.8%CVE-2018-14652MEDIUMThe Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code hEPSS 2.7%CVE-2024-1786HIGHD-Link DIR-600M C1 Telnet Service buffer overflowEPSS 2.7%CVE-2022-41030HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 2.7%CVE-2023-38036CRITICALA security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overfEPSS 2.7%CVE-2020-14355—Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14EPSS 2.7%CVE-2021-34727CRITICALCisco IOS XE SD-WAN Software Buffer Overflow VulnerabilityEPSS 2.6%CVE-2024-9908MEDIUMD-Link DIR-619L B1 formSetMACFilter buffer overflowEPSS 2.6%CVE-2025-4442HIGHD-Link DIR-605L formSetWAN_Wizard55 buffer overflowEPSS 2.6%CVE-2025-4441HIGHD-Link DIR-605L formSetWAN_Wizard534 buffer overflowEPSS 2.6%CVE-2020-28592HIGHA heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AFEPSS 2.5%CVE-2022-22687CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStationEPSS 2.4%CVE-2021-26606CRITICALDreamSecurity MagicLine Buffer Overflow VulnerabilityEPSS 2.4%CVE-2021-43082—heap-buffer-overflow with stats-over-http pluginEPSS 2.4%CVE-2022-23093MEDIUMStack overflow in ping(8)EPSS 2.4%CVE-2022-24764HIGHStack buffer overflow in pjprojectEPSS 2.4%CVE-2023-22741CRITICALheap-over-flow in stun_parse_attribute in sofia-sipEPSS 2.4%CVE-2021-3185—A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could causeEPSS 2.4%CVE-2024-27280CRITICALA buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte EPSS 2.4%CVE-2021-43303—Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplEPSS 2.4%