CWE-120: Classic Buffer Overflow
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Also known as Buffer Copy without Checking Size of Input, Unbounded Transfer.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- tenda ac23, ac23 firmware +1 moreTenda AC23 PowerSaveSet sscanf buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigAdvideo strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formTaskEdit strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formPptpClientConfig strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formUser strcpy buffer overflow8.7 High
- samsung exynos 1380 firmware, exynos 1480 firmware, exynos 1580 firmware +1 more +3 moreAn issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect...8.4 High
- samsung exynos 1380 firmware, exynos 1480 firmware, exynos 1580 firmware +1 more +3 moreAn issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400,...8.4 High
- qnap qts, quts hero +1 moreQTS, QuTS hero1.2 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero1.3 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero1.3 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero1.3 Low
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W formFtpServerDirConfig strcpy buffer overflow8.7 High
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W formFtpServerShareDirSelcet strcpy buffer overflow8.7 High
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflow8.7 High
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W formRemoteControl strcpy buffer overflow8.7 High
- tenda ac20, ac20 firmware +1 moreTenda AC20 PowerSaveSet sscanf buffer overflow8.7 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- tenda ac23, ac23 firmware +1 moreTenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow8.7 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow8.7 High
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formParentControl sub_423848 buffer overflow8.7 High
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formDefRoute sub_464794 buffer overflow8.7 High
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W ConfigExceptMSN strcpy buffer overflow8.7 High
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W formPictureUrl strcpy buffer overflow8.7 High
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W formConfigNoticeConfig strcpy buffer overflow8.7 High
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W APSecurity strcpy buffer overflow8.7 High
- cobiansoft cobian reflector, reflector +1 moreCobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field6.9 Medium
- cobiansoft backup 11, cobian backup gravity +1 moreCobian Backup 11 Gravity 11.2.0.582 Local Denial of Service via Password Field6.9 Medium
- tp-link systems inc. tapo c200 v3, tp-link tapo c200 firmware, tp-link systems inc. tapo c520ws v2.6 +2 moreRemote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS8.7 High
- pali igmpproxyigmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service ...7.5 High
- elastic filebeatFilebeat Improper Validation of Specified Index, Position, or Offset in Input6.5 Medium
- qualcomm qam8255p firmware, qam8620p firmware, qam8650p firmware +21 more +23 moreBuffer Copy Without Checking Size of Input in Boot9.0 Critical
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +113 more +115 moreBuffer Copy Without Checking Size of Input in Core Services7.8 High
- capstone-engine capstoneCapstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow4.8 Medium
- apple ipados, macos, safari +3 more +5 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in...4.3 Medium
- riot-os riotRIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass1.7 Low
- tenda ac10 firmwareA Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0...6.5 Medium
- tenda ac10 firmwareA Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0...9.8 Critical
- meltytech shotcutMeltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs...9.8 Critical
- mercurycom d196g firmwareMercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function...9.8 Critical
- mercurycom d196g firmwareMercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function...9.8 Critical
- autodesk shared componentsCATPART File Parsing Memory Corruption Vulnerability7.8 High
- autodesk shared componentsMODEL File Parsing Memory Corruption Vulnerability7.8 High
- autodesk shared componentsMODEL File Parsing Memory Corruption Vulnerability7.8 High
- autodesk shared componentsPRT File Parsing Memory Corruption Vulnerability7.8 High
- autodesk shared componentsSLDPRT File Parsing Memory Corruption Vulnerability7.8 High
- autodesk shared componentsSLDPRT File Parsing Memory Corruption Vulnerability7.8 High
- gomlab gom playerGOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset Name6.7 Medium
- emqx nanomqNanoMQ has Buffer Overflow8.5 High
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow9.3 Critical
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflow9.3 Critical
- Show moreLoading…