Falhas do tipo CWE-120

3.163 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-8180HIGHTenda CH22 deleteUserName formdeleteUserName buffer overflowEPSS 8.5%CVE-2025-8138HIGHTOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflowEPSS 7.8%CVE-2025-8140HIGHTOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflowEPSS 7.8%CVE-2025-3346HIGHTenda AC7 SetPptpServerCfg formSetPPTPServer buffer overflowEPSS 7.7%CVE-2025-3328HIGHTenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflowEPSS 7.6%CVE-2021-21051HIGHAdobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 7.4%CVE-2024-7157HIGHTOTOLINK A3100R getSaveConfig buffer overflowEPSS 7.4%CVE-2018-8785—FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption aEPSS 7.3%CVE-2018-8784—FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corrEPSS 7.3%CVE-2024-20450CRITICALMultiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5EPSS 7.2%CVE-2004-0210HIGHThe POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly bEPSS 7.2%KEVCVE-2017-16740—A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and EPSS 7.1%CVE-2025-5861HIGHTenda AC7 AdvSetLanip fromadvsetlanip buffer overflowEPSS 6.8%CVE-2024-7217MEDIUMTOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflowEPSS 6.8%CVE-2024-50667CRITICALThe boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formEPSS 6.7%CVE-2024-20454CRITICALMultiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA5EPSS 6.6%CVE-2021-28549HIGHAdobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code executionEPSS 6.5%CVE-2025-10169HIGHUTT 1200GW ConfigWirelessBase buffer overflowEPSS 6.5%CVE-2025-45779CRITICALTenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.EPSS 6.5%CVE-2025-14708CRITICALShiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflowEPSS 6.5%