Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-3727MEDIUMPCMan FTP Server STATUS Command buffer overflowEPSS 0.8%CVE-2025-3373MEDIUMPCMan FTP Server SITE CHMOD Command buffer overflowEPSS 0.8%CVE-2026-1143HIGHTOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg buffer overflowEPSS 0.7%CVE-2026-7069HIGHD-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflowEPSS 0.7%CVE-2021-21967MEDIUMAn out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A speciaEPSS 0.7%CVE-2023-46565HIGHBuffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of seEPSS 0.7%CVE-2024-50999MEDIUMNetgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulEPSS 0.7%CVE-2024-52949HIGHiptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is coEPSS 0.7%CVE-2025-53888MEDIUMRIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.cEPSS 0.7%CVE-2024-41631HIGHBuffer Overflow vulnerability in host-host NEUQ_board v.1.0 allows a remote attacker to cause a denial of service via the password.h componeEPSS 0.7%CVE-2026-29009HIGHU-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINKEPSS 0.7%CVE-2025-13258HIGHTenda AC20 WifiExtraSet buffer overflowEPSS 0.7%CVE-2025-15217HIGHTenda AC23 HTTP POST Request formSetPPTPUserList buffer overflowEPSS 0.7%CVE-2025-67186CRITICALTOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firEPSS 0.7%CVE-2024-34196HIGHTotolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The "boa" progEPSS 0.7%CVE-2025-5672HIGHTOTOLINK N302R Plus HTTP POST Request formFilter buffer overflowEPSS 0.7%CVE-2025-5671HIGHTOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflowEPSS 0.7%CVE-2025-5737HIGHTOTOLINK X15 HTTP POST Request formDosCfg buffer overflowEPSS 0.7%CVE-2025-5789HIGHTOTOLINK X15 HTTP POST Request formPortFw buffer overflowEPSS 0.7%CVE-2025-5738HIGHTOTOLINK X15 HTTP POST Request formStats buffer overflowEPSS 0.7%