Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2024-5974HIGHFirebox Authenticated Buffer Overflow VulnerabilityEPSS 1.0%CVE-2024-8078HIGHTOTOLINK AC1200 T8 setTracerouteCfg buffer overflowEPSS 1.0%CVE-2023-47004HIGHBuffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code EPSS 1.0%CVE-2025-3993HIGHTOTOLINK N150RT formWsc buffer overflowEPSS 1.0%CVE-2025-3989HIGHTOTOLINK N150RT formStaticDHCP buffer overflowEPSS 1.0%CVE-2025-3991HIGHTOTOLINK N150RT formWdsEncrypt buffer overflowEPSS 1.0%CVE-2025-3990HIGHTOTOLINK N150RT formVlan buffer overflowEPSS 1.0%CVE-2025-3992HIGHTOTOLINK N150RT formWlwds buffer overflowEPSS 1.0%CVE-2025-11444HIGHTOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflowEPSS 1.0%CVE-2022-32140MEDIUMCODESYS runtime system prone to denial of service due to buffer copyEPSS 1.0%CVE-2025-24266CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS VenturaEPSS 1.0%CVE-2022-25514—stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has dEPSS 1.0%CVE-2021-33720—A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variantsEPSS 1.0%CVE-2025-8245HIGHTOTOLINK X15 HTTP POST Request formMultiAPVLAN buffer overflowEPSS 1.0%CVE-2021-33974HIGHQihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/) is affected by: BuffEPSS 1.0%CVE-2024-33773MEDIUMA buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigEPSS 1.0%CVE-2025-4114HIGHNetgear JWNR2000v2 check_language_file buffer overflowEPSS 1.0%CVE-2025-10838HIGHTenda AC21 WifiExtraSet sub_45BB10 buffer overflowEPSS 1.0%CVE-2025-8243HIGHTOTOLINK X15 HTTP POST Request formMapDel buffer overflowEPSS 1.0%CVE-2021-40241CRITICALxfig 3.2.7 is vulnerable to Buffer Overflow.EPSS 1.0%