CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,088 vulnerabilities with CWE-120
CVE-2025-45859 MEDIUM
Totolink A3002r Firmware - Buffer Overflow
CVSS 5.4
CVE-2025-44175 MEDIUM
Tenda Ac10 Firmware - Buffer Overflow
CVSS 5.4
CVE-2025-45779 CRITICAL
Tenda Ac10 Firmware - Buffer Overflow
CVSS 9.8
CVE-2025-3496 HIGH
Unknown - Buffer Overflow
CVSS 7.5
CVE-2025-4497 MEDIUM
Code-projects Simple Banking System < 1.0 - Memory Corruption
CVSS 5.3
CVE-2025-4496 HIGH
Totolink A3000ru Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4462 HIGH
Totolink N150rt Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4452 HIGH
Dlink Dir-619l Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4451 HIGH
Dlink Dir-619l Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4450 HIGH
Dlink Dir-619l Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4449 HIGH
Dlink Dir-619l Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4448 HIGH
Dlink Dir-619l Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4446 HIGH
H3C GR-5400AX <100R008 - Buffer Overflow
CVSS 8.0
CVE-2025-4442 HIGH
Dlink Dir-605l Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4441 HIGH
Dlink Dir-605l Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4440 HIGH
H3C GR-1800AX <100R008 - Buffer Overflow
CVSS 8.0
CVE-2025-1253 HIGH
RTI Connext Professional - Buffer Overflow
CVSS 7.8
CVE-2025-37803 HIGH
Linux Kernel - Buffer Overflow
CVSS 7.8
CVE-2025-36557 HIGH
F5 Big-ip Access Policy Manager < 16.1.5 - Buffer Overflow
CVSS 7.5
CVE-2025-36525 HIGH
F5 Big-ip Access Policy Manager < 15.1.10.7.0.4.5 - Buffer Overflow
CVSS 7.5
CVE-2025-4368 HIGH
Tenda Ac8 Firmware - Memory Corruption
CVSS 8.8
CVE-2025-4348 HIGH
Dlink Dir-600l Firmware < 2.07b01 - Memory Corruption
CVSS 8.8
CVE-2025-4347 HIGH
Dlink Dir-600l Firmware < 2.07b01 - Memory Corruption
CVSS 8.8
CVE-2025-4346 HIGH
Dlink Dir-600l Firmware < 2.07b01 - Memory Corruption
CVSS 8.8
CVE-2025-4345 HIGH
Dlink Dir-600l Firmware < 2.07b01 - Memory Corruption
CVSS 8.8
Details
Vulnerabilities 4,088
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits