CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,088 vulnerabilities with CWE-120
CVE-2025-4832 HIGH
Totolink A702r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4831 HIGH
Totolink A702r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4830 HIGH
Totolink A702r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4829 HIGH
Totolink A702r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4827 HIGH
Totolink A702r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4826 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
CVSS 8.8
CVE-2025-4825 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
CVSS 8.8
CVE-2025-4824 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
CVSS 8.8
CVE-2025-4823 HIGH
TOTOLINK A702R, A3002R, A3002RU 3.0.0-B20230809.1615 - Buffer Overflow
CVSS 8.8
CVE-2025-4792 HIGH
Freefloat FTP Server - Memory Corruption
CVSS 7.3
CVE-2025-4791 HIGH
Freefloat FTP Server - Out-of-Bounds Write
CVSS 7.3
CVE-2025-4790 HIGH
Freefloat FTP Server - Out-of-Bounds Write
CVSS 7.3
CVE-2025-4789 HIGH
Freefloat FTP Server - Out-of-Bounds Write
CVSS 7.3
CVE-2025-4788 HIGH
Freefloat FTP Server - Out-of-Bounds Write
CVSS 7.3
CVE-2025-4733 HIGH
Totolink A3002r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4732 HIGH
Totolink A3002r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4731 HIGH
Totolink A3002r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4730 HIGH
Totolink A3002r Firmware - Memory Corruption
CVSS 8.8
CVE-2025-44879 HIGH
WS-WN572HP3 V230525 - Buffer Overflow
CVSS 7.5
CVE-2025-46785 MEDIUM
Zoom Workplace Apps for Windows - DoS
CVSS 6.5
CVE-2025-45863 CRITICAL
Totolink A3002r Firmware - Buffer Overflow
CVSS 9.8
CVE-2025-45865 CRITICAL
Totolink A3002r Firmware - Buffer Overflow
CVSS 9.8
CVE-2025-45861 CRITICAL
Totolink A3002r Firmware - Buffer Overflow
CVSS 9.8
CVE-2025-45866 MEDIUM
Totolink A3002r Firmware - Buffer Overflow
CVSS 5.4
CVE-2025-45864 MEDIUM
Totolink A3002r Firmware - Buffer Overflow
CVSS 5.4
Details
Vulnerabilities 4,088
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits