Buffer Overflow
Critical · Memory
OWASP Top 10:2025 (current)
Not directly mapped to a Top 10:2025 category — see CWE / CVE below.
CWE
CWE-120
CVE / class examples
- Search NVD/CVE for product-specific instances of this CWE
All refs
CWE-120
Definition
Writes past allocated buffer bounds corrupt memory / control flow.
Root cause
Unsafe languages without bounds checks; bad copy loops.
Affected components
- Components in the “Memory” class
- Application / API handlers
- Supporting libraries
Impact
Crash or code execution.
Severity
Critical
Safe lab reproduction
Intentionally vulnerable binaries in an isolated lab
Detection methodology
Crash dumps, fuzzing, memory sanitizers.
Evidence examples
- Lab reproduction notes: Intentionally vulnerable binaries in an isolated lab
- Request/response excerpts (redacted)
- Detection signal: Crash dumps, fuzzing, memory sanitizers
Remediation
Safe languages / bounds-checked APIs; ASLR/DEP/canaries.
Secure coding examples
Prefer memory-safe languages; enable compiler hardenings.
Related CYNARKS lessons & labs
Practise related skills in Labs or deepen on Academy library.