CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,086 vulnerabilities with CWE-120
CVE-2025-28164 MEDIUM
Libpng < 1.6.46 - Buffer Overflow
CVSS 5.5
CVE-2025-28162 MEDIUM
Libpng < 1.6.46 - Buffer Overflow
CVSS 5.5
CVE-2025-69209 MEDIUM
ArduinoCore-avr <1.8.7 - Buffer Overflow
CVE-2025-68137 HIGH
Linuxfoundation Everest < 2025.10.0 - Infinite Loop
CVSS 8.3
CVE-2025-55131 HIGH
Node.js - Memory Corruption
CVSS 7.1
CVE-2025-29329 CRITICAL
Sagemcom F@st 3686 Firmware - Buffer Overflow
CVSS 9.8
CVE-2025-69260 HIGH
Trendmicro Apex Central - Out-of-Bounds Read
CVSS 7.5
CVE-2025-69259 HIGH
Trendmicro Apex Central - NULL Pointer Dereference
CVSS 7.5
CVE-2025-69258 CRITICAL
Trendmicro Apex Central - Origin Validation Error
CVSS 9.8
CVE-2025-47394 HIGH
Qualcomm Sm8750 Firmware - Buffer Overflow
CVSS 7.8
CVE-2025-47388 HIGH
Qualcomm Fastconnect 6200 Firmware - Buffer Overflow
CVSS 7.8
CVE-2025-47335 MEDIUM
Qualcomm Fastconnect 6700 Firmware - Buffer Overflow
CVSS 6.7
CVE-2025-47334 MEDIUM
Qualcomm Csra6620 Firmware - Buffer Overflow
CVSS 6.7
CVE-2025-53966 HIGH
Samsung Exynos 1380 Firmware - Buffer Overflow
CVSS 8.4
CVE-2025-49495 HIGH
Samsung Exynos 1380 Firmware - Buffer Overflow
CVSS 8.4
CVE-2025-15462 HIGH
UTT 520w Firmware < 1.7.7-180627 - Memory Corruption
CVSS 8.8
CVE-2025-15461 HIGH
UTT 520w Firmware < 1.7.7-180627 - Memory Corruption
CVSS 8.8
CVE-2025-15460 HIGH
UTT 520w Firmware < 1.7.7-180627 - Memory Corruption
CVSS 8.8
CVE-2025-15459 HIGH
UTT 520w Firmware < 1.7.7-180627 - Memory Corruption
CVSS 8.8
CVE-2025-48721 MEDIUM
QNAP OS - Buffer Overflow
CVSS 6.5
CVE-2025-52872 HIGH
Qnap Quts Hero - Buffer Overflow
CVSS 8.1
CVE-2025-52864 HIGH
Qnap Quts Hero - Buffer Overflow
CVSS 8.1
CVE-2025-52863 HIGH
Qnap Quts Hero - Buffer Overflow
CVSS 8.1
CVE-2025-15431 HIGH
UTT 512w Firmware < 1.7.7-171114 - Memory Corruption
CVSS 8.8
CVE-2025-15430 HIGH
UTT 512w Firmware < 1.7.7-171114 - Memory Corruption
CVSS 8.8
Details
Vulnerabilities 4,086
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits