CWE-120: Classic Buffer Overflow
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Also known as Buffer Copy without Checking Size of Input, Unbounded Transfer.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- postgresql, red hat enterprise linux 10, enterprise linux 9 +1 more +3 morePostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory8.2 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary code8.8 High
- ourway webfsdwebfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request. This is due to the filename...9.8 Critical
- p2r3 bareironp2r3 Bareiron commit: 8e4d4020d is vulnerable to Buffer Overflow, which allows unauthenticated...7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...7.5 High
- apple ipados, macos, safari +19 more +21 moreThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...5.5 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS...4.3 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS...6.5 Medium
- pjsip, pjsip pjproject +1 morePJSIP has a heap buffer overflow in ICE with long username8.1 High
- top password software msn password recoveryMSN Password Recovery 1.30 - Denial of Service4.6 Medium
- digitalvolcano software textcrawler proTextCrawler Pro3.1.1 - Denial of Service6.7 Medium
- nsasoft spotmsn, nsauditor spotmsn +1 moreSpotMSN 2.4.6 - 'Name' Denial of Service4.6 Medium
- nsasoft spotim, nsauditor spotim +1 moreSpotIM 2.2 - 'Name' Denial Of Service4.6 Medium
- nsasoft spotie, nsauditor spotie +1 moreSpotIE 2.9.5 - 'Key' Denial of Service4.6 Medium
- nsasoft spotftp, nsauditor spotftp ftp password recovery +1 moreSpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service4.6 Medium
- nsasoft spotdialup, nsauditor spotdialup +1 moreSpotDialup 1.6.7 - 'Key' Denial of Service4.6 Medium
- nsasoft sharealarmpro, nsauditor sharealarmpro advanced network access control +1 moreShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service4.6 Medium
- nsasoft remshutdown, nsauditor remshutdown +1 moreRemShutdown 2.9.0.0 - 'Name' Denial of Service4.6 Medium
- nsasoft remshutdown, nsauditor remshutdown +1 moreRemShutdown 2.9.0.0 - 'Key' Denial of Service4.6 Medium
- nsasoft nsauditor office product key finderOffice Product Key Finder 1.5.4 - Denial of Service4.6 Medium
- nsasoft nsauditor networksleuthNetworkSleuth 3.0.0.0 - 'Key' Denial of Service4.6 Medium
- nsasoft netsharewatcher, nsauditor netsharewatcher +1 moreNetShareWatcher 1.5.8.0 - 'Name' Denial Of Service4.6 Medium
- nsasoft nbmonitor, nsauditor nbmonitor +1 moreNBMonitor 1.6.6.0 - 'Key' Denial of Service4.6 Medium
- nsasoft domain name search software, nsauditor dnss domain name search software +1 moreDnss Domain Name Search Software - 'Name' Denial of Service4.6 Medium
- nsasoft domain name search software, nsauditor dnss domain name search software +1 moreDnss Domain Name Search Software - 'Key' Denial of Service4.6 Medium
- nsasoft blueauditorBlueAuditor 1.7.2.0 - 'Name' Denial of Service4.6 Medium
- nsasoft nsauditor backup key recovery recover keys crashed hard disk driveBackup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service4.6 Medium
- top password software zip password recoveryZIP Password Recovery 2.30 - 'ZIP File' Denial of Service4.6 Medium
- top password software dialup password recoveryTop Password Software Dialup Password Recovery 1.30 - Denial of Service4.6 Medium
- top password software password firefox password recoveryTop Password Firefox Password Recovery 2.8 - Denial of Service4.6 Medium
- digitalvolcano software taskcanvasTaskCanvas 1.4.0 - 'Registration' Denial Of Service4.6 Medium
- nsasoft nsauditor spotoutlookSpotOutlook 1.2.6 - 'Name' Denial of Service4.6 Medium
- nsasoft nsauditor spotdialupSpotDialup 1.6.7 - 'Name' Denial of Service4.6 Medium
- nsasoft nsauditor backup key recoveryBackup Key Recovery 2.2.5 - 'Name' Denial of Service4.6 Medium
- nsasoft nsauditor gtalk password finderGTalk Password Finder 2.2.1 - 'Key' Denial of Service4.6 Medium
- nsasoft nsauditor apkf product key finderAPKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service4.6 Medium
- ka ming cheung p2pwificam2 for iosP2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service4.6 Medium
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap quts hero, qts +1 moreQuTS hero0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- dun munge, debian linux, red hat ai inference server 3.3 +16 more +18 moreMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery7.7 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 Embedded Httpd Service fast_setting_wifi_set buffer overflow8.7 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflow8.7 High
- tenda tx9, tx9 firmware +1 moreTenda TX9 setMacFilterCfg sub_4223E0 buffer overflow8.7 High
- tenda tx9, tx9 firmware +1 moreTenda TX9 fast_setting_wifi_set sub_432580 buffer overflow8.7 High
- Show moreLoading…