CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,334 vulnerabilities with CWE-120
CVE-2026-15543 HIGH
Tenda CH22 CertListInfo formCertListInfo buffer overflow
CVSS 8.8
CVE-2026-15484 HIGH
TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
CVSS 8.8
CVE-2026-15483 HIGH
TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
CVSS 8.8
CVE-2026-29009 HIGH
U-Boot 2026.04-rc3 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
CVSS 8.2
CVE-2026-57246 HIGH
Foxit PDF Editor/Reader Signature Buffer Overflow Vulnerability
CVSS 7.8
CVE-2026-8247 HIGH
WatchGuard Firebox admd Out of Bounds Write Vulnerability
CVE-2026-52191 HIGH
UTT nv518G 3.2.7-210919-161313 - Remote Denial of Service via gohead/sub_444C8C Buffer Overflow
CVSS 7.5
CVE-2026-52189 HIGH
UTT nv518G 3.2.7-210919-161313 - Remote Denial of Service via gohead/sub_487330 Buffer Overflow
CVSS 7.5
CVE-2026-52187 HIGH
UTT nv518G and nv518GV3 3.2.7-210919-161313 - Remote Denial of Service via gohead/sub_483ba0 Buffer Overflow
CVSS 7.5
CVE-2026-57278 HIGH
GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability
CVSS 8.3
CVE-2026-57277 HIGH
GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability
CVSS 8.3
CVE-2026-57276 HIGH
GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability
CVSS 8.3
CVE-2026-57275 HIGH
GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability
CVSS 8.3
CVE-2026-57274 HIGH
GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability
CVSS 8.3
CVE-2026-57273 HIGH
GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability
CVSS 8.3
CVE-2026-20244 HIGH
Cisco Secure Endpoint - ClamAV DMG File Processing Denial of Service Vulnerability
CVSS 7.5
CVE-2026-20243 HIGH
Cisco Secure Endpoint - ClamAV ALZ Archive Processing Denial of Service Vulnerability
CVSS 7.5
CVE-2026-20217 HIGH
ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability
CVSS 7.5
CVE-2026-20215 HIGH
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability
CVSS 7.5
CVE-2026-20214 HIGH
ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability
CVSS 7.5
CVE-2026-20213 HIGH
ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability
CVSS 7.5
CVE-2026-6688 HIGH
FatFs Buffer Overflow via Unbounded LFN Filename Copy
CVSS 7.6
CVE-2026-52198 HIGH
UTT nv518G nv518GV3 v3.2.7-210919-161313 - Buffer Overflow via gohead/sub_425994 Component
CVSS 7.5
CVE-2026-52195 HIGH
UTT nv518G nv518GV3v3.2.7-210919-161313 - Buffer Overflow via gohead/sub_472f08
CVSS 7.5
CVE-2026-52193 HIGH
UTT nv518G nv518GV3v3.2.7-210919-161313 - Buffer Overflow via gohead/sub_447CAC
CVSS 7.5
Details
Vulnerabilities 4,334
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits