Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2026-64767CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TahoeEPSS 0.8%CVE-2025-22913CRITICALRE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.EPSS 0.8%CVE-2024-22472HIGHLong S0 frames received by 500 series Z-Wave devices may cause buffer overflowEPSS 0.8%CVE-2023-3766MEDIUMInvalid Slice Split Results in Server PanicEPSS 0.8%CVE-2023-44828HIGHD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPasswdSettings functioEPSS 0.8%CVE-2026-4690CRITICALSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentEPSS 0.8%CVE-2025-43501MEDIUMA buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 2EPSS 0.8%CVE-2023-4260MEDIUMPotential off-by-one buffer overflow vulnerability in the Zephyr FS subsystemEPSS 0.8%CVE-2022-42272HIGHNVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code executEPSS 0.8%CVE-2025-12239HIGHTOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflowEPSS 0.8%CVE-2025-12240HIGHTOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflowEPSS 0.8%CVE-2024-22419HIGHconcat built-in can corrupt memory in vyperEPSS 0.8%CVE-2025-15089HIGHUTT 进取 512W APSecurity strcpy buffer overflowEPSS 0.8%CVE-2025-15090HIGHUTT 进取 512W formConfigNoticeConfig strcpy buffer overflowEPSS 0.8%CVE-2023-50986HIGHTenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.EPSS 0.8%CVE-2024-7534HIGHHeap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via EPSS 0.8%CVE-2026-43750CRITICALA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TahoeEPSS 0.8%CVE-2025-5330MEDIUMFreeFloat FTP Server RETR Command buffer overflowEPSS 0.8%CVE-2024-10371MEDIUMSourceCodester Payroll Management System main login buffer overflowEPSS 0.8%CVE-2023-2686CRITICALBuffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payloaEPSS 0.8%