CWE-120: Classic Buffer Overflow
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Also known as Buffer Copy without Checking Size of Input, Unbounded Transfer.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- open asset import library assimpOpen Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow5.3 Medium
- No product listedBuffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to...9.8 Critical
- No product listedBuffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to...9.8 Critical
- edimax ew-7478apcEdimax EW-7478APC formWlSiteSurvey buffer overflow9.4 Critical
- linuxcpu: hotplug: Bound hotplug states sysfs output7.8 High
- tenda ac12Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow8.7 High
- tenda g0Tenda G0 httpd web management interface module setPortMapping buffer overflow8.7 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in Host Servers8.2 High
- linuxs390/zcrypt: Validate length for CCA AES cipher key requests7.8 High
- linuxs390/zcrypt: Validate length for CCA ECC private key requests7.8 High
- mongodb bi connector odbc driverCrafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver8.8 High
- fortinet forticlient, forticlientwindows +1 moreA buffer copy without checking size of input ('classic buffer overflow') vulnerability in...7.3 High
- phoenix contact axc f 1152, axc f 1252, axc f 2152 +12 more +14 moreUnauthenticated Buffer Overflow in PROFINET Service9.3 Critical
- No product listedOpen5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow5.3 Medium
- red hat build of apache camel for spring boot 4, data grid 8, fuse 7 +9 more +11 moreUndertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method7.5 High
- d-link dwr-m961D-Link DWR-M961 Buffer Overflow via quicksetup.cgi9.3 Critical
- d-link dwr-m961D-Link DWR-M961 Buffer Overflow via app.cgi9.3 Critical
- cisco secure endpointClamAV XAR File Format Processing Memory Corruption Vulnerability7.5 High
- cisco secure endpointClamAV ZIP File Format Processing Memory Corruption Vulnerability7.5 High
- No product listedBuffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial...7.5 High
open62541DebianBuffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of...7.5 High- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreDhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapi4.9 Medium
- opensipsOpenSIPS: Global Buffer Overflow in construct_uri9.1 Critical
- opensipsOpenSIPS: Buffer Overflow in Base64 Encode Transformation9.1 Critical
- tp-link systems inc. p110 v1, tp-link tapo p110 firmware +1 moreAuthenticated Denial-of-Service Vulnerability in TP-Link Tapo P1107.1 High
- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +34 more +36 moreBuffer Copy Without Checking Size of Input in Biometrics7.8 High
- qualcomm aqt1000 firmware, cologne firmware, fastconnect 6200 firmware +50 more +52 moreBuffer Copy Without Checking Size of Input in Bluetooth HOST6.7 Medium
open62541DebianBuffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of...7.5 Highopen62541DebianBuffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is...7.5 High- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp file-png plugin: denial of service via oversized apng trns chunk5.5 Medium
- ntpsecBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec4.7 Medium
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +28 more +30 morePower System update in Buffer Copy8.4 High
- gnu binutilsGNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow2.4 Low
- gnu binutilsGNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow4.8 Medium
- gnu binutilsGNU Binutils ld cache.c cache_bwrite buffer overflow4.8 Medium
- apple macosA buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe...9.8 Critical
- apple ipados, macos, ios and ipados +1 more +3 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6...7.8 High
- apple ipados, macos, tvos +3 more +5 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6...8.8 High
- apple macosA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...7.1 High
- apple macosA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...9.8 Critical
- apple macosA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.6...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.5.2...9.8 Critical
- apple macosA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...7.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS...5.5 Medium
- erlang otpMegaco flex scanner buffer overflow via oversized property parm name8.3 High
- apache nimbleApache NimBLE: Buffer overflow in socket HCI transport7.5 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX7.2 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreLow-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: Playback component9.1 Critical
- Show moreLoading…