CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,199 vulnerabilities with CWE-120
CVE-2025-11300 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-11299 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-11297 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-11296 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-11295 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-11294 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-11293 HIGH
Belkin F9K1015 1.00.10 - Buffer Overflow
CVSS 8.8
CVE-2025-57275 MEDIUM
SPDK < 25.9 - Buffer Overflow in NVMe-oF Target Component
CVSS 5.5
CVE-2025-11120 HIGH
Tenda AC8 16.03.34.06 - Buffer Overflow
CVSS 8.8
CVE-2025-11117 HIGH
Tenda CH22 1.0.0.1 - Buffer Overflow
CVSS 8.8
CVE-2025-11091 HIGH
Tenda AC21 <16.03.08.16 - Buffer Overflow
CVSS 8.8
CVE-2025-55847 HIGH
Wavlink M86X3A_V240730 - Buffer Overflow
CVSS 8.8
CVE-2025-57632 HIGH
libsmb2 6.2+ - Buffer Overflow via SMB2 Chained PDU Processing
CVSS 7.5
CVE-2025-20333 CRITICAL KEV
Cisco Secure Firewall ASA/FTD - RCE
CVSS 9.9
CVE-2025-10953 HIGH
UTT 1200GW and 1250GW Firmware < 3.0.0-170831/3.2.2-200710 - Buffer Overflow via senderEmail Parameter
CVSS 8.8
CVE-2025-10948 HIGH
MikroTik RouterOS <7 - Buffer Overflow
CVSS 8.8
CVE-2025-10942 HIGH
H3C Magic B3 <100R002 - Buffer Overflow
CVSS 8.8
CVE-2025-20149 MEDIUM
Cisco IOS Software - Buffer Overflow
CVSS 6.5
CVE-2025-21481 HIGH
Qualcomm 315 5G IoT Modem Firmware - Buffer Overflow in Private Key Encryption
CVSS 7.8
CVE-2025-21476 HIGH
Qualcomm Firmware - Memory Corruption via Trusted Virtual Machine Handshake Parameter
CVSS 7.8
CVE-2025-9962 CRITICAL
Novakon P series < P-2.0.05 - Unauthenticated Buffer Overflow
CVE-2025-10838 HIGH
Tenda AC21 Firmware < 16.03.08.16 - Buffer Overflow via WifiExtraSet wpapsk_crypto Argument
CVSS 8.8
CVE-2025-10815 HIGH
Tenda AC20 Firmware <= 16.03.08.12 - Buffer Overflow via SetPptpServerCfg startIp Parameter
CVSS 8.8
CVE-2025-8892 HIGH
Autodesk Shared Components 1.6.2.11-1.8.0.7 - Memory Corruption via PRT File Parsing
CVSS 7.8
CVE-2025-10803 HIGH
Tenda AC23 Firmware < 16.03.07.52 - Buffer Overflow via SetPptpServerCfg startIp Parameter
CVSS 8.8
Details
Vulnerabilities 4,199
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits