Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-11408HIGHD-Link DI-7001 MINI dbsrv.asp buffer overflowEPSS 0.9%CVE-2025-9813HIGHTenda CH22 SetSambaConf formSetSambaConf buffer overflowEPSS 0.9%CVE-2026-2067HIGHUTT 进取 520W formTimeGroupConfig strcpy buffer overflowEPSS 0.9%CVE-2025-24209HIGHA buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17EPSS 0.9%CVE-2025-7914HIGHTenda AC6 httpd setparentcontrolinfo buffer overflowEPSS 0.9%CVE-2020-23257HIGHBuffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMaEPSS 0.9%CVE-2023-32975MEDIUMQTS, QuTS heroEPSS 0.9%CVE-2023-4257HIGHUnchecked user input length in the Zephyr WiFi shell moduleEPSS 0.9%CVE-2024-32664MEDIUMSuricata's base64 contains an out of bounds writeEPSS 0.9%CVE-2023-5753MEDIUMPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemEPSS 0.9%CVE-2023-49468HIGHLibde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc.EPSS 0.9%CVE-2025-10756HIGHUTT HiPER 840G getOneApConfTempEntry buffer overflowEPSS 0.9%CVE-2022-24023CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 0.9%CVE-2025-8940HIGHTenda AC20 saveParentControlInfo strcpy buffer overflowEPSS 0.9%CVE-2024-30259HIGHFastDDS heap buffer overflow when publisher sends malformed packetEPSS 0.9%CVE-2023-44834HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function. TEPSS 0.9%CVE-2023-44829HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. TEPSS 0.9%CVE-2025-1895HIGHTenda TX3 setMacFilterCfg buffer overflowEPSS 0.9%CVE-2023-44837HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function. This vulnEPSS 0.9%CVE-2023-44833HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function. ThiEPSS 0.9%