CWE-120: Classic Buffer Overflow
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Also known as Buffer Copy without Checking Size of Input, Unbounded Transfer.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- redhat virtio-win, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreVirtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request6.7 Medium
libcrux-chacha20poly1305crates.iolibcrux: Potential Panic on Overlong Ciphertext Buffer8.2 High- zephyrproject zephyrnet: eswifi socket send payload length not bounded7.3 High
- totolink lr350, lr350 firmware +1 moreTotolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow8.7 High
- utt hiper 1250gwUTT HiPER 1250GW Parameter formConfigDnsFilterGlobal strcpy buffer overflow8.7 High
- zerbea hcxtoolsBuffer Overflow vulnerability in ZerBea hcxpcapngtool v. 7.0.1-43-g2ee308e allows a local...6.2 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...4.3 Medium
- apple macosThe issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.4. A...7.5 High
- apple ipados, ios and ipados, iphone os +2 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4...9.8 Critical
- apple ipados, ios and ipados, iphone os +2 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4...7.5 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...4.3 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...6.5 Medium
- apple macosA buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe...6.2 Medium
- No product listedA buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The...7.2 High
- f5 nginx open source, nginx plus, red hat enterprise linux 10 +9 more +11 moreNGINX ngx_http_dav_module vulnerability8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 149 and Thunderbird 1499.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 1499.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 1499.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry component8.6 High
- tenda ac21, ac21 firmware +1 moreTenda AC21 SetNetControlList formSetQosBand buffer overflow8.7 High
- xnview nconvertXnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file.6.2 Medium
- ruby zlibzlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption1.7 Low
- utt hiper 1250gwUTT HiPER 1250GW setSysAdm strcpy buffer overflow8.7 High
- utt hiper 1200gwUTT HiPER 1200GW websHostFilter strcpy buffer overflow8.7 High
- gnu ncurses, siemens ruggedcom rst2428p +1 morencurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...7.3 High
- utt hiper 810gUTT HiPER 810G formApLbConfig strcpy buffer overflow8.7 High
- toddr yaml::syck, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 more +4 moreYAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter9.1 Critical
- pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 morepyOpenSSL DTLS cookie callback buffer overflow7.2 High
- lb-link bl-wr9000, bl-wr9000 firmware +1 moreLB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow8.7 High
- zephyrproject zephyrcrypto: ATAES132A response length allows stack buffer overflow3.8 Low
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet7.1 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreGStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- at&t bell labs unixIn UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to...7.4 High
- gnu inetutilstelnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local...9.8 Critical
- color iccdeviccDEV has a stack buffer overflow write in CIccXform3DLut::Apply()7.8 High
- color iccdeviccDEV has a stack buffer overflow in CIccTagNum<(icTagTypeSignature)>::GetValues()7.8 High
- color iccdeviccDEV has a heap-based buffer overflow write in CIccMatrixMath::SetRange()7.8 High
- color iccdeviccDEV has a stack buffer overflow in icFixXml()7.8 High
- color iccdeviccDEV has a heap-buffer-overflow read in CIccXmlArrayType<>6.1 Medium
- color iccdeviccDEV has a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp()7.8 High
- fortinet fortiswitchaxfixedA buffer copy without checking size of input ('classic buffer overflow') vulnerability in...7.7 High
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G formApMail strcpy buffer overflow8.7 High
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G getOneApConfTempEntry strcpy buffer overflow8.7 High
- h3c magic b1, magic b1 firmware +1 moreH3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflow8.7 High
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G formConfigDnsFilterGlobal strcpy buffer overflow8.7 High
- Show moreLoading…