Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2023-26110HIGHAll versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user inputEPSS 0.9%CVE-2026-51808CRITICALBuffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::EPSS 0.9%CVE-2024-30584CRITICALTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.EPSS 0.9%CVE-2022-41483HIGHTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x4a12cc function. This vulnerabilityEPSS 0.9%CVE-2022-41481HIGHTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47de1c function. This vulnerabilityEPSS 0.9%CVE-2025-4299HIGHTenda AC1206 openSchedWifi setSchedWifi buffer overflowEPSS 0.8%CVE-2022-42273HIGHNVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service EPSS 0.8%CVE-2025-4368HIGHTenda AC8 MtuSetMacWan formGetRouterStatus buffer overflowEPSS 0.8%CVE-2025-15091HIGHUTT 进取 512W formPictureUrl strcpy buffer overflowEPSS 0.8%CVE-2025-15092HIGHUTT 进取 512W ConfigExceptMSN strcpy buffer overflowEPSS 0.8%CVE-2025-7913HIGHTOTOLINK T6 MQTT Service updateWifiInfo buffer overflowEPSS 0.8%CVE-2025-7758HIGHTOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflowEPSS 0.8%CVE-2022-46547CRITICALTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.EPSS 0.8%CVE-2024-35099CRITICALTOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth.EPSS 0.8%CVE-2024-27619HIGHDlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to EPSS 0.8%CVE-2023-25434HIGHlibtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.EPSS 0.8%CVE-2023-28505HIGHBuffer overflow in UniRPC library functionEPSS 0.8%CVE-2021-33680MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which causes bufferEPSS 0.8%CVE-2025-11300HIGHBelkin F9K1015 formWlanMP buffer overflowEPSS 0.8%CVE-2025-11651HIGHUTT 进取 518G formRemoteControl sub_4247AC buffer overflowEPSS 0.8%