Falhas do tipo CWE-120

3.154 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-5905HIGHTOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflowEPSS 11.3%CVE-2023-20189HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 11.1%CVE-2025-5904HIGHTOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflowEPSS 11.0%CVE-2025-5903HIGHTOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflowEPSS 11.0%CVE-2024-7463HIGHTOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflowEPSS 11.0%CVE-2019-5064HIGHAn exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A EPSS 10.7%CVE-2020-15069CRITICALSophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientlesEPSS 10.7%KEVCVE-2023-20161HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 10.3%CVE-2023-20160HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 10.3%CVE-2023-20159HIGHCisco Small Business Series Switches Buffer Overflow VulnerabilitiesEPSS 10.3%CVE-2022-23747—In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed EPSS 10.2%CVE-2023-29468CRITICALThe Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EEPSS 10.1%CVE-2025-9961HIGHAuthenticated RCE by CWMP binaryEPSS 9.8%CVE-2024-37357CRITICALA buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTEPSS 9.7%CVE-2022-45672HIGHTenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet function.EPSS 9.1%CVE-2020-7593—A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.0EPSS 9.1%CVE-2023-50991HIGHBuffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoSEPSS 8.8%CVE-2022-41966HIGHXStream Denial of Service via stack overflow EPSS 8.8%CVE-2021-3466—A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remEPSS 8.7%CVE-2021-28580HIGHMedium by Adobe file parsing buffer overflow vulnerability could lead to arbitrary code executionEPSS 8.5%