Falhas do tipo CWE-120

3.163 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2021-36075HIGHAdobe Bridge Buffer Overflow leads to Arbitrary Code ExecutionEPSS 5.6%CVE-2023-28769CRITICALThe buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.EPSS 5.4%CVE-2024-54887HIGHTP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userEPSS 5.4%CVE-2019-5439—A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.EPSS 5.3%CVE-2021-42731HIGHAdobe Indesign Buffer Overflow Could Lead to Remote Code ExecutionEPSS 5.2%CVE-2019-6557—Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.EPSS 5.0%CVE-2025-45859MEDIUMTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interfacEPSS 5.0%CVE-2025-12618HIGHTenda AC8 DatabaseIniSet buffer overflowEPSS 5.0%CVE-2019-15166LOWlmp_print in tcpdump lacks certain boundary checksEPSS 5.0%CVE-2024-29195MEDIUMAzure C SDK Integer Wraparound VulnerabilityEPSS 5.0%CVE-2024-12343HIGHTP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflowEPSS 5.0%CVE-2025-6151HIGHTP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflowEPSS 5.0%CVE-2022-23203HIGHAdobe Photoshop Buffer Overflow could lead to Arbitrary code executionEPSS 4.9%CVE-2025-45864MEDIUMTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interfaEPSS 4.9%CVE-2025-12235HIGHTenda CH22 SetIpBind fromSetIpBind buffer overflowEPSS 4.8%CVE-2025-10953HIGHUTT 1200GW/1250GW formApMail buffer overflowEPSS 4.8%CVE-2022-23218CRITICALThe deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path arguEPSS 4.7%CVE-2025-6627HIGHTOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflowEPSS 4.7%CVE-2021-22934—A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device EPSS 4.7%CVE-2018-14879HIGHThe command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().EPSS 4.7%