CWE-120: Classic Buffer Overflow
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Also known as Buffer Copy without Checking Size of Input, Unbounded Transfer.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege...7.8 High
- google androidIn get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing...8.4 High
- google androidIn ReadDataElement of common.c, there is a possible information disclosure due to an incorrect...6.2 Medium
- google androidIn decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing...8.0 High
- google androidIn IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds...8.8 High
- google androidIn Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds...8.4 High
- google androidIn setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing...3.3 Low
- google androidIn openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing...7.8 High
- google androidIn checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due...8.0 High
- ffmpegBuffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of...2.9 Low
- No product listedBuffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13...9.8 Critical
- google androidIn get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read...3.5 Low
- google androidIn rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an...7.8 High
- google androidIn do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing...4.4 Medium
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature8.8 High
- tenda hg10Tenda HG10 Boa Web Server formIPv6Routing buffer overflow10.0 Critical
- nasa cfsNASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow5.3 Medium
- tp-link system inc. tl-wr841n v14Pre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841N5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling6.1 Medium
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Memory Corruption via dispatcher.cgi _readHttpParam8.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: stack overflow in name2utf8 causes dos and potential code execution7.6 High
- apple macos, ios and ipados +1 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...5.5 Medium
- adobe xdAdobe XD | Buffer Overflow (CWE-120)7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreFile-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers6.5 Medium
gpacDebianBuffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker...7.8 High- autodesk 3ds maxSVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max7.8 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalert8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmail8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models Buffer Overflow via apautotest8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models Buffer Overflow via setLan8.6 High
- utt hiper 1200gwUTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow8.7 High
- hashcathashcat through 7.1.2 Heap Buffer Overflow in outfile_write() via Oversized Username6.9 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.8 Critical
- sony xav-9500esSony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability3.9 Low
- sony xav-9500esSony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability8.8 High
- cisco roomos softwareCisco RoomOS Stack Overflow Vulnerability6.1 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- netscaler adc, gateway +1 moreVulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through...8.8 High
- equinor resdataresdata insufficiently validates untrusted GRDECL files9.8 Critical
- nvidia cumulus linux, cumulus linux ga, cumulus linux lts +2 moreNVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon...7.5 High
- dell powerstore 1000t, powerstore 1200t, powerstore 3000t +9 more +11 moreDell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the...8.1 High
- sonos tractsonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size5.3 Medium
- open asset import library assimpOpen Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow5.3 Medium
- Show moreLoading…