CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,106 vulnerabilities with CWE-120
CVE-2017-7269 CRITICAL KEV
IIS 6.0 - Buffer Overflow
CVSS 9.8
CVE-2017-6058 HIGH
Qemu < 2.8.1.1 - Buffer Overflow
CVSS 7.5
CVE-2017-0520 HIGH
Linux Kernel - Buffer Overflow
CVSS 7.0
CVE-2017-0481 HIGH
Google Android - Buffer Overflow
CVSS 7.8
CVE-2017-0306 HIGH
Linux Kernel - Buffer Overflow
CVSS 7.8
CVE-2017-0442 HIGH
Google Android < 7.1.1 - Buffer Overflow
CVSS 7.0
CVE-2017-0441 HIGH
Google Android < 7.1.1 - Buffer Overflow
CVSS 7.0
CVE-2017-0440 HIGH
Google Android < 7.1.1 - Buffer Overflow
CVSS 7.0
CVE-2017-0439 HIGH
Google Android < 7.1.1 - Buffer Overflow
CVSS 7.0
CVE-2017-0438 HIGH
Google Android < 7.1.1 - Buffer Overflow
CVSS 7.0
CVE-2017-0437 HIGH
Google Android < 7.1.1 - Buffer Overflow
CVSS 7.0
CVE-2016-2356 CRITICAL
Milesight IP Security Camera Firmware < 2016-11-14 - Buffer Overflow
CVSS 9.8
CVE-2016-8620 MEDIUM
curl <7.51.0 - Memory Corruption
CVSS 6.5
CVE-2016-6559 CRITICAL
BSD libc - Memory Corruption
CVSS 9.8
CVE-2016-8714 HIGH
R 3.3.0 - Buffer Overflow
CVSS 8.8
CVE-2016-10066 MEDIUM
ImageMagick <6.9.4.5 - Buffer Overflow
CVSS 5.5
CVE-2016-10174 CRITICAL KEV
Netgear D6100 Firmware - Buffer Overflow
CVSS 9.8
CVE-2016-9035 HIGH
Joyent SmartOS 20161110T013148Z - Buffer Overflow
CVSS 7.0
CVE-2016-9034 HIGH
Joyent SmartOS <20161110T013148Z - Buffer Overflow
CVSS 7.0
CVE-2016-9033 HIGH
Joyent SmartOS 20161110T013148Z - Buffer Overflow
CVSS 7.0
CVE-2016-9032 HIGH
Joyent SmartOS 20161110T013148Z - Buffer Overflow
CVSS 7.0
CVE-2016-9428 HIGH
Tats W3m < 0.5.3-30 - Memory Corruption
CVSS 8.8
CVE-2016-7422 MEDIUM
Qemu < 2.7.1 - Buffer Overflow
CVSS 6.0
CVE-2016-6834 MEDIUM
Qemu < 2.6.2 - Buffer Overflow
CVSS 4.4
CVE-2016-6490 MEDIUM
QEMU - DoS
CVSS 4.4
Details
Vulnerabilities 4,106
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits