CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,334 vulnerabilities with CWE-120
CVE-2026-11885 HIGH
IBM PowerVM Hypervisor - Power System Update in Buffer Copy
CVSS 8.4
CVE-2026-51252 CRITICAL
schreibfaul1 ESP32-audioI2S 3.4.5 - Buffer Overflow via MP3 Metadata in MP3Decoder::UnpackSFMPEG1
CVSS 9.8
CVE-2026-64767 CRITICAL
Apple macOS - Buffer Overflow
CVSS 9.8
CVE-2026-64747 HIGH
Apple Ios And iPadOS - Buffer Overflow
CVSS 7.8
CVE-2026-64722 MEDIUM
Apple Ios And iPadOS - Buffer Overflow
CVSS 5.5
CVE-2026-64691 CRITICAL
Apple macOS < 26.6 - Buffer Overflow
CVSS 9.8
CVE-2026-43807 CRITICAL
Apple Ios And iPadOS - Buffer Overflow
CVSS 9.8
CVE-2026-43776 HIGH
Apple Ios And iPadOS - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 7.8
CVE-2026-43750 CRITICAL
Apple macOS - Buffer Overflow
CVSS 9.8
CVE-2026-43681 HIGH
Apple macOS - Buffer Overflow
CVSS 7.1
CVE-2026-28981 HIGH
Apple macOS - Buffer Overflow
CVSS 7.8
CVE-2026-28931 HIGH
Apple Ios And iPadOS - Buffer Overflow
CVSS 8.8
CVE-2026-59250 HIGH
Megaco flex scanner buffer overflow via oversized property parm name
CVE-2026-45811 HIGH
Apache NimBLE: Buffer overflow in socket HCI transport
CVSS 7.5
CVE-2026-63453 HIGH
Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
CVSS 7.2
CVE-2026-44880 HIGH
Hewlett Packard Enterprise (hpe) Aos-cx < 10.17.1020 - Buffer Overflow
CVSS 8.8
CVE-2026-16364 CRITICAL
Incorrect boundary conditions in the Audio/Video: Playback component
CVSS 9.1
CVE-2026-44436 HIGH
Quicly is vulnerable to connection state corruption
CVSS 7.5
CVE-2026-51380 CRITICAL
Tenda AC10 v3 V03.03.16.09 - Buffer Overflow and Remote Code Execution via UploadCfg Endpoint
CVSS 9.8
CVE-2026-58553 MEDIUM
Huawei HarmonyOS - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 4.0
CVE-2026-58552 MEDIUM
Huawei HarmonyOS - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 5.1
CVE-2026-58551 MEDIUM
Huawei HarmonyOS - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 5.1
CVE-2026-58550 MEDIUM
Huawei HarmonyOS - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 4.0
CVE-2026-58549 MEDIUM
Huawei HarmonyOS - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 4.0
CVE-2026-51808 CRITICAL
OpenHTJ2K < 0.18.5 - Remote Code Execution via Buffer Overflow in Decoder Functions
CVSS 9.8
Details
Vulnerabilities 4,334
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits