Falhas do tipo CWE-120

3.248 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2022-44183CRITICALTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.EPSS 1.1%CVE-2025-5908HIGHTOTOLINK EX1200T HTTP POST Request formIpQoS buffer overflowEPSS 1.1%CVE-2025-11296HIGHBelkin F9K1015 formPPTPSetup buffer overflowEPSS 1.1%CVE-2025-11295HIGHBelkin F9K1015 formPPPoESetup buffer overflowEPSS 1.1%CVE-2025-5862HIGHTenda AC7 setPptpUserList formSetPPTPUserList buffer overflowEPSS 1.1%CVE-2022-45714CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.EPSS 1.1%CVE-2022-45707CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.EPSS 1.1%CVE-2025-5875HIGHTP-LINK Technologies TL-IPC544EP-W4 main sub_69064 buffer overflowEPSS 1.1%CVE-2022-45718CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.EPSS 1.1%CVE-2022-45706CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.EPSS 1.1%CVE-2022-45710CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the forEPSS 1.1%CVE-2022-45715CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the EPSS 1.1%CVE-2022-45720CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBinEPSS 1.1%CVE-2022-45708CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping functionEPSS 1.1%CVE-2022-45719CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.EPSS 1.1%CVE-2022-45721CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.EPSS 1.1%CVE-2022-45712CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.EPSS 1.1%CVE-2022-45716CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.EPSS 1.1%CVE-2025-11293HIGHBelkin F9K1015 formConnectionSetting buffer overflowEPSS 1.1%CVE-2025-11302HIGHBelkin F9K1015 formWpsStart buffer overflowEPSS 1.1%