CWE-120: Classic Buffer Overflow
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Also known as Buffer Copy without Checking Size of Input, Unbounded Transfer.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- pcman ftp serverPCMan FTP Server PORT buffer overflow6.9 Medium
- zoom communications workplaceBuffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated...8.0 High
- ami aptiovUEFI OOB Write and Buffer Overflow Vulnerabilities8.2 High
- k2-fsa sherpa-onnxk2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow5.3 Medium
libconfiniAzure LinuxBuffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause...7.5 High- edimax br-6208acEdimax BR-6208AC formWlanMP buffer overflow9.4 Critical
- edimax br-6208acEdimax BR-6208AC formWlSiteSurvey buffer overflow9.4 Critical
- kamailioKamailio sipt ss7_parser.c isup_get_calling_party buffer overflow6.9 Medium
- savannah lwip smtp clientSavannah lwIP SMTP client Classic Buffer Overflow9.3 Critical
- zephyrproject zephyrOut-of-bounds write in LE Audio Broadcast Sink when copying BASE subgroup metadata into the BASS receive state8.8 High
- ibm guardium data protectionMultiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection8.1 High
- ibm guardium data protectionMultiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection8.1 High
- ibm guardium data protectionMultiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection8.1 High
- brocade fabric os, broadcom fabric operating system +1 moreA buffer overflow vulnerability exists in the WebTools administrative interface handling...6.9 Medium
- brocade fabric os, broadcom fabric operating system +1 moreA memory buffer overflow vulnerability exists in the internal diagnostic and route validation...6.8 Medium
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent7.8 High
- hewlett packard enterprise (hpe) aos-switch (aos-s)Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S9.1 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S9.3 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S9.8 Critical
gpacUbuntuGPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow5.3 Medium- watchguard fireware osFireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution8.7 High
- hewlett packard enterprise (hpe) instant onUnauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS9.6 Critical
- zoneminderZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response8.3 High
- citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 moreMemory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service8.8 High
- ibm concertMultiple Vulnerabilities in IBM Concert Software9.8 Critical
- netcore nbr200v2Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow9.4 Critical
- netcore nbr200v2Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow9.4 Critical
- No product listedFalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the...8.8 High
- totolink a3002muTotolink A3002MU formWlWds buffer overflow10.0 Critical
- totolink a3002muTotolink A3002MU formWlEncrypt buffer overflow10.0 Critical
- totolink a3002muTotolink A3002MU formWlAc buffer overflow9.4 Critical
- totolink a3002muTotolink A3002MU formSchedule buffer overflow9.4 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 morePppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.6.8 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways5.5 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service5.5 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways6.4 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways6.5 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint7.2 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways8.1 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways8.2 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways9.8 Critical
- freerdpFreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO7.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Audio/Video component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: WebRender component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component8.8 High
- Show moreLoading…