Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2022-22570—A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malEPSS 1.1%CVE-2020-5213MEDIUMNetHack SYMBOL configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2025-8242HIGHTOTOLINK X15 HTTP POST Request formFilter buffer overflowEPSS 1.1%CVE-2020-5212MEDIUMNetHack MENUCOLOR configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2025-5910HIGHTOTOLINK EX1200T HTTP POST Request formWsc buffer overflowEPSS 1.1%CVE-2025-5911HIGHTOTOLINK EX1200T HTTP POST Request formDMZ buffer overflowEPSS 1.1%CVE-2023-39204MEDIUMBuffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.EPSS 1.1%CVE-2023-3725HIGHPotential buffer overflow vulnerability in the Zephyr CANbus subsystemEPSS 1.1%CVE-2026-3701HIGHH3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflowEPSS 1.1%CVE-2024-41285CRITICALA stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoSEPSS 1.1%CVE-2022-45719CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.EPSS 1.1%CVE-2022-28550CRITICALMatthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer EPSS 1.1%CVE-2022-45715CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the EPSS 1.1%CVE-2022-45714CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.EPSS 1.1%CVE-2022-45707CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.EPSS 1.1%CVE-2022-45706CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.EPSS 1.1%CVE-2022-45708CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping functionEPSS 1.1%CVE-2022-45712CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.EPSS 1.1%CVE-2022-45710CRITICALIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the forEPSS 1.1%CVE-2026-3271HIGHTenda F453 httpd P2pListFilterof fromP2pListFilter buffer overflowEPSS 1.1%