CWE-120: Classic Buffer Overflow
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Also known as Buffer Copy without Checking Size of Input, Unbounded Transfer.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- rethinkdbA buffer overflow in rethinkdb/rethinkdb10.0 Critical
- tildearrow furnaceA heap-based buffer over-read or buffer overflow in tildearrow/furnace10.0 Critical
- davisking dlibA heap-based buffer over-read or buffer overflow in davisking/dlib5.2 Medium
- azerothcore, azerothcore azerothcore-wotlk +1 moreA heap-based buffer over-read or buffer overflow vulnerability in azerothcore/azerothcore-wotlk10.0 Critical
- libpngBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial...5.5 Medium
- libpngBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial...5.5 Medium
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 High
- tenda ac23, ac23 firmware +1 moreTenda AC23 WifiExtraSet buffer overflow8.7 High
- totolink nr1800x, nr1800x firmware +1 moreTotolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow8.7 High
- arduino arduinocore-avrArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors6.9 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop8.4 High
- embedd gmbh dd-wrtDD-WRT 45723 - UPNP Buffer Overflow8.7 High
- utt hiper 810, 810 firmware +1 moreUTT HiPER 810 setSysAdm strcpy buffer overflow9.3 Critical
- totolink lr350, lr350 firmware +1 moreTotolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow8.7 High
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow8.7 High
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow8.7 High
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow8.7 High
- totolink a3700r, a3700r firmware +1 moreTOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigExceptAli strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigExceptMSN strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigExceptQQ strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formWebAuthGlobalConfig strcpy buffer overflow8.7 High
- cijliu librtspcijliu librtsp rtsp_parse_method buffer overflow4.8 Medium
- cijliu librtspcijliu librtsp rtsp_parse_request buffer overflow4.8 Medium
- cijliu librtspcijliu librtsp rtsp_rely_dumps buffer overflow4.8 Medium
- nodejs node, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are...7.1 High
- nsasoft nsauditorNsauditor 3.2.3 - Denial of Service (PoC)6.7 Medium
- nsasoft nbmonitorNBMonitor 1.6.8 - Denial of Service (PoC)6.7 Medium
- nsauditor backup key recoveryBackup Key Recovery 2.2.7 - Denial of Service (PoC)6.7 Medium
- noteburnerNoteBurner 2.35 - Denial Of Service (DoS) (PoC)6.7 Medium
- leawo prof. mediaLeawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)6.7 Medium
- aimone-video-converter aimone video converterAimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration Form5.1 Medium
- litexmedia audio conversion wizardAudio Conversion Wizard v2.01 - Buffer Overflow8.6 High
- color iccdeviccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp8.8 High
- sagemcom f\@st 3686 firmwareBuffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686...9.8 Critical
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formPictureUrl strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formConfigNoticeConfig strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W APSecurity strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W ConfigWirelessBase strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formFireWall strcpy buffer overflow8.7 High
- utt 进取 520w, 520w firmware +1 moreUTT 进取 520W formConfigFastDirectionW strcpy buffer overflow8.7 High
- ubiquiti inc airfiber af60, airfiber af60-xg, airmax ac +5 more +7 moreA malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the...8.8 High
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote...7.5 High
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a...7.5 High
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote...9.8 Critical
- ruby zlib, red hat logging subsystem for red hat openshift, build of openjdk 1.8 +14 more +16 morezlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()4.6 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +43 more +45 moreBuffer Copy Without Checking Size of Input in DSP Service7.8 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +43 more +45 moreBuffer Copy without Checking Size of Input in DSP Service7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +43 more +45 moreBuffer Copy Without Checking Size of Input in Camera Driver6.7 Medium
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +144 more +146 moreBuffer Copy Without Checking Size of Input in Camera Driver6.7 Medium
- Show moreLoading…