CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,198 vulnerabilities with CWE-120
CVE-2026-1137 HIGH
UTT 520W < 1.7.7-180627 - Buffer Overflow via formWebAuthGlobalConfig strcpy
CVSS 8.8
CVE-2026-1110 MEDIUM
cijliu librtsp <2ec1a81ad65280568a0c7c16420d7c10fde13b04 - Buffer O...
CVSS 5.3
CVE-2026-1109 MEDIUM
cijliu librtsp <2ec1a81ad65280568a0c7c16420d7c10fde13b04 - Buffer O...
CVSS 5.3
CVE-2026-1108 MEDIUM
cijliu librtsp <2ec1a81ad65280568a0c7c16420d7c10fde13b04 - Buffer O...
CVSS 5.3
CVE-2026-22861 HIGH
iccDEV < 2.3.1.2 - Heap-Based Buffer Overflow in SIccCalcOp::Describe()
CVSS 8.8
CVE-2026-0841 HIGH
UTT 520W < 1.7.7-180627 - Buffer Overflow via formPictureUrl importpictureurl Parameter
CVSS 8.8
CVE-2026-0840 HIGH
UTT 520W < 1.7.7-180627 - Buffer Overflow via timestart Argument in formConfigNoticeConfig
CVSS 8.8
CVE-2026-0839 HIGH
UTT 520W < 1.7.7-180627 - Buffer Overflow via wepkey1 Argument in APSecurity Function
CVSS 8.8
CVE-2026-0838 HIGH
UTT 520W < 1.7.7-180627 - Buffer Overflow via SSID Parameter in ConfigWirelessBase
CVSS 8.8
CVE-2026-0837 HIGH
UTT 520W < 1.7.7-180627 - Buffer Overflow via GroupName Argument in formFireWall
CVSS 8.8
CVE-2026-0836 HIGH
UTT 520W < 1.7.7-180627 - Buffer Overflow via ssid Argument in formConfigFastDirectionW
CVSS 8.8
CVE-2026-0640 HIGH
Tenda AC23 16.03.07.52 - Buffer Overflow via PowerSaveSet Time Parameter
CVSS 8.8
CVE-2025-12686 CRITICAL
Synology BeeStation Manager (bsm) - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 9.8
CVE-2025-29944 MEDIUM
AMD Ryzen 4000 Series Mobile Processors - Buffer Overflow
CVE-2025-0045 MEDIUM
AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2025-29338 MEDIUM
NXP moal.ko Wi-Fi driver 5.1.7.10 - Buffer Overflow
CVSS 5.6
CVE-2025-47404 MEDIUM
Buffer Copy Without Checking Size of Input in Automotive Audio
CVSS 6.5
CVE-2025-44560 CRITICAL
owntone-server 2ca10d9 - Buffer Overflow
CVSS 9.8
CVE-2025-59969 MEDIUM
Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart
CVSS 6.5
CVE-2025-50673 HIGH
D-Link DI-8003 16.07.26A1 - Buffer Overflow
CVSS 7.5
CVE-2025-50672 HIGH
D-Link DI-8003 16.07.26A1 - Buffer Overflow
CVSS 7.5
CVE-2025-50670 HIGH
D-Link DI-8003 16.07.26A1 - Buffer Overflow
CVSS 7.5
CVE-2025-50669 HIGH
D-Link DI-8003 16.07.26A1 - Buffer Overflow
CVSS 7.5
CVE-2025-50668 HIGH
D-Link DI-8003 16.07.26A1 - Buffer Overflow
CVSS 7.5
CVE-2025-50667 HIGH
D-Link DI-8003 16.07.26A1 - Buffer Overflow
CVSS 7.5
Details
Vulnerabilities 4,198
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits