Falhas do tipo CWE-120

3.246 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2022-40997HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2022-40988HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2022-40991HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2022-40996HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2022-40992HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2022-40994HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2022-40989HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2022-40995HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.5%CVE-2024-9533HIGHD-Link DIR-605L formDeviceReboot buffer overflowEPSS 1.5%CVE-2024-9514HIGHD-Link DIR-605L formSetDomainFilter buffer overflowEPSS 1.5%CVE-2024-36290CRITICALA buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially craftedEPSS 1.5%CVE-2024-39349CRITICALA vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and itEPSS 1.4%CVE-2023-39667CRITICALD-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 funEPSS 1.4%CVE-2025-8244HIGHTOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflowEPSS 1.4%CVE-2024-8573HIGHTOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflowEPSS 1.4%CVE-2021-34979HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouEPSS 1.4%CVE-2023-28504CRITICALStack buffer overflow in UniRPC library functionEPSS 1.4%CVE-2024-9552HIGHD-Link DIR-605L formSetWanNonLogin buffer overflowEPSS 1.4%CVE-2024-9557HIGHD-Link DIR-605L formSetWanPPPoE buffer overflowEPSS 1.4%CVE-2025-41707MEDIUMPhoenix Contact: WebSocket Handler Denial of ServiceEPSS 1.4%