Falhas do tipo CWE-120

3.164 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2025-5595MEDIUMFreeFloat FTP Server PROGRESS Command buffer overflowEPSS 0.7%CVE-2025-5666MEDIUMFreeFloat FTP Server XMKD Command buffer overflowEPSS 0.7%CVE-2025-5664MEDIUMFreeFloat FTP Server RESTART Command buffer overflowEPSS 0.7%CVE-2024-5412HIGHA buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenEPSS 0.7%CVE-2025-5665MEDIUMFreeFloat FTP Server XCWD Command buffer overflowEPSS 0.7%CVE-2024-34198CRITICALTOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa proEPSS 0.7%CVE-2025-9812HIGHTenda CH22 exeCommand formexeCommand buffer overflowEPSS 0.7%CVE-2026-30075HIGHOpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response contaEPSS 0.7%CVE-2022-4857MEDIUMModbus Tools Modbus Poll mbp File mbpoll.exe buffer overflowEPSS 0.7%CVE-2026-93741CRITICALTotolink A3002MU formWlWds buffer overflowEPSS 0.7%CVE-2023-26109HIGHAll versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to impropeEPSS 0.7%CVE-2024-10964MEDIUMemqx neuron plugin_handle.c handle_add_plugin buffer overflowEPSS 0.7%CVE-2025-12274HIGHTenda CH22 P2pListFilter fromP2pListFilter buffer overflowEPSS 0.7%CVE-2026-82770HIGHBuffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's webEPSS 0.7%CVE-2026-82772HIGHBuffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web seEPSS 0.7%CVE-2026-27942LOWfast-xml-parser has stack overflow in XMLBuilder with preserveOrderEPSS 0.7%CVE-2024-49778HIGHA heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service (DoS) and Code ExecuEPSS 0.7%CVE-2023-22416HIGHJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is receivedEPSS 0.7%CVE-2024-21274HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected EPSS 0.7%CVE-2025-67188CRITICALA buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /liEPSS 0.7%