CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,199 vulnerabilities with CWE-120
CVE-2025-60548 CRITICAL
D-Link DIR600L Ax - Buffer Overflow
CVSS 9.8
CVE-2025-60343 HIGH
Tenda AC6 v.15.03.06.50 - Buffer Overflow
CVSS 7.5
CVE-2025-60340 HIGH
Tenda AC6 <15.03.06.50 - Buffer Overflow
CVSS 7.5
CVE-2025-60339 HIGH
Tenda AC6 Firmware 15.03.06.50 - Denial of Service via schedStartTime and schedEndTime Parameters
CVSS 7.5
CVE-2025-60337 HIGH
Tenda AC6 V2.0 15.03.06.50 - Buffer Overflow
CVSS 7.5
CVE-2025-53474 HIGH
F5 BIG-IP ILX::call - TMM Denial of Service
CVSS 7.5
CVE-2025-20709 HIGH
MediaTek Software Development Kit - Remote Escalation of Privilege via WLAN AP Driver Bounds Check
CVSS 8.8
CVE-2025-41707 MEDIUM
Phoenix Contact QUINT4-UPS - Unauthenticated Denial of Service via WebSocket Message
CVSS 5.3
CVE-2025-41706 MEDIUM
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP < VC:07 - Unauthenticated Denial of Service via Oversized Content-Length
CVSS 5.3
CVE-2025-11653 HIGH
UTT HiPER 2620G < 3.1.4 - Buffer Overflow via NTPServerIP Argument in fNTP Function
CVSS 8.8
CVE-2025-11652 HIGH
UTT 518G < 3.2.7-210919-161313 - Buffer Overflow via txtMin2 Parameter
CVSS 8.8
CVE-2025-11651 HIGH
UTT 518G < 3.2.7-210919-161313 - Buffer Overflow via Remote Control Profile Parameter
CVSS 8.8
CVE-2025-52960 MEDIUM
Juniper Junos OS < 22.4R3-S7, 23.2-23.2R2-S4, 23.4-23.4R2-S5, 24.2-24.2R2 - DoS via SIP ALG Packet Handling
CVSS 5.9
CVE-2025-47341 HIGH
Qualcomm FastConnect 6700 Firmware - Memory Corruption via Image Encoding Completion Event
CVSS 7.8
CVE-2025-11444 HIGH
TOTOLINK N600R <4.3.0cu.7866_B20220506 - Buffer Overflow
CVSS 8.8
CVE-2025-11408 HIGH
D-Link DI-7001 MINI 24.04.18B1 - Buffer Overflow
CVSS 8.8
CVE-2025-11385 HIGH
Tenda AC20 <16.03.08.12 - Buffer Overflow
CVSS 8.8
CVE-2025-11356 HIGH
Tenda AC23 <16.03.07.52 - Buffer Overflow
CVSS 8.8
CVE-2025-11355 HIGH
UTT 1250GW <v2v3.2.2-200710 - Buffer Overflow
CVSS 8.8
CVE-2025-11339 HIGH
D-Link DI-7100G C1 <20250928 - Buffer Overflow
CVSS 8.8
CVE-2025-11338 HIGH
D-Link DI-7100G C1 - Buffer Overflow
CVSS 8.8
CVE-2025-11323 HIGH
UTT 1250GW <v2v3.2.2-200710 - Buffer Overflow
CVSS 8.8
CVE-2025-11305 HIGH
UTT HiPER 840G <3.1.1-190328 - Buffer Overflow
CVSS 8.8
CVE-2025-11302 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-11301 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
Details
Vulnerabilities 4,199
Exploit Likelihood High