Falhas do tipo CWE-120

3.246 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-4148HIGHNetgear EX6200 sub_503FC buffer overflowEPSS 1.7%CVE-2025-4149HIGHNetgear EX6200 sub_54014 buffer overflowEPSS 1.7%CVE-2019-9134HIGHArchitectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary cEPSS 1.7%CVE-2022-29242MEDIUMBuffer Overflow on creating key transport blob in GOST EngineEPSS 1.7%CVE-2012-10035CRITICALTurbo FTP Server 1.30.823/826 PORT Command Buffer OverflowEPSS 1.7%CVE-2021-32968HIGHMoxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer OverflowEPSS 1.7%CVE-2022-40985HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.7%CVE-2024-3871CRITICALAuthenticated Remote Command Injection in Delta Electronics DVWEPSS 1.7%CVE-2023-47610HIGHA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticEPSS 1.7%CVE-2025-31277HIGHThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOEPSS 1.7%KEVCVE-2018-15688HIGHOut-of-Bounds write in systemd-networkd dhcpv6 option handlingEPSS 1.7%CVE-2025-41706MEDIUMPhoenix Contact: Webserver Denial of Service through Malformed Content-LengthEPSS 1.7%CVE-2022-31019HIGHDoS Vulnerability in URLEncodedFormDecoder in VaporEPSS 1.7%CVE-2025-4150HIGHNetgear EX6200 sub_54340 buffer overflowEPSS 1.7%CVE-2024-9914HIGHD-Link DIR-619L B1 formSetWizardSelectMode buffer overflowEPSS 1.7%CVE-2024-9913HIGHD-Link DIR-619L B1 formSetRoute buffer overflowEPSS 1.7%CVE-2022-22683CRITICALBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-EPSS 1.6%CVE-2022-31481CRITICALRemote Code Execution via buffer overflow in firmware update processEPSS 1.6%CVE-2021-33226CRITICALBuffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/moEPSS 1.6%CVE-2022-34823CRITICALBuffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SiEPSS 1.6%