Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-6939HIGHTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflowEPSS 0.9%CVE-2021-21969LOWAn out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. ThEPSS 0.9%CVE-2025-0960CRITICALAutomationDirect C-more EA9 HMI Classic Buffer OverflowEPSS 0.9%CVE-2026-30650HIGHA post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of VivEPSS 0.9%CVE-2022-39343MEDIUMAzure RTOS FileX vulnerable to Buffer OfferflowEPSS 0.9%CVE-2021-21970LOWAn out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. ThEPSS 0.9%CVE-2022-34886HIGHA remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing aEPSS 0.9%CVE-2023-43010HIGHThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS EPSS 0.9%CVE-2025-20115HIGHCisco IOS XR Software Border Gateway Protocol Denial of Service VulnerabilityEPSS 0.9%CVE-2026-27459HIGHpyOpenSSL DTLS cookie callback buffer overflowEPSS 0.9%CVE-2023-49208CRITICALscheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registrEPSS 0.9%CVE-2023-22917HIGHA buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firEPSS 0.9%CVE-2019-16536HIGHStack overflow leading to DoS can be triggered by a malicious authenticated client.EPSS 0.9%CVE-2023-26319MEDIUMXiaomi Router administration interface vulnerability leads command injection and stack overflowEPSS 0.9%CVE-2025-13288HIGHTenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflowEPSS 0.9%CVE-2024-48406CRITICALBuffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the pEPSS 0.9%CVE-2024-39769CRITICALMultiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 0.9%CVE-2024-39802CRITICALMultiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 0.9%CVE-2024-25139CRITICALIn TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffeEPSS 0.9%CVE-2022-49058CRITICALcifs: potential buffer overflow in handling symlinksEPSS 0.9%