CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,334 vulnerabilities with CWE-120
CVE-2026-46332 HIGH
greybus: gb-beagleplay: bound bootloader receive buffering
CVSS 8.0
CVE-2026-9698 CRITICAL
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer
CVSS 9.8
CVE-2026-42536 HIGH
Apache HTTP Server: mod_xml2enc heap overflow
CVSS 7.5
CVE-2026-34355 HIGH
Apache HTTP Server: mod_proxy_html buffer overflow
CVSS 7.5
CVE-2026-11517 HIGH
UTT HiPER 2610G formConfigDnsFilterGlobal strcpy buffer overflow
CVSS 8.8
CVE-2026-11516 MEDIUM
UTT HiPER 2610G formNatStaticMap strcpy buffer overflow
CVSS 5.5
CVE-2026-30652 HIGH
Vivotek FD8136 FD8136-VVTK-0300a - Authenticated Remote Code Execution via setdo.cgi Buffer Overflow
CVSS 8.8
CVE-2026-30650 HIGH
Vivotek FD8136 FD8136-VVTK-0300a - Authenticated Remote Buffer Overflow in Event Task CGI
CVSS 8.8
CVE-2026-3871 MEDIUM
Zyxel VMG4005-B50B Firmware - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 6.5
CVE-2026-3870 MEDIUM
Zyxel VMG4005-B50B Firmware - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 6.5
CVE-2026-25277 HIGH
Qualcomm Snapdragon Secure Processor - Strongbox Buffer Overflow
CVSS 8.8
CVE-2026-28580 HIGH
Google Android - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS 7.8
CVE-2026-0056 LOW
Android 14-16 ResourceTypes - Out-of-Bounds Read Information Disclosure
CVSS 3.3
CVE-2026-10275 MEDIUM
OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow
CVSS 5.0
CVE-2026-10164 HIGH
Edimax BR-6478AC POST Request formUSBFolder buffer overflow
CVSS 8.8
CVE-2026-10163 HIGH
Edimax BR-6478AC POST Request formUSBAccount buffer overflow
CVSS 8.8
CVE-2026-10126 HIGH
Edimax BR-6478AC POST Request formQoS buffer overflow
CVSS 8.8
CVE-2026-38426 HIGH
Tasmota < 15.3.0.3 - Buffer Overflow via xdrv_10_scripter.ino strcpy Function
CVSS 7.3
CVE-2026-9627 HIGH
UTT HiPER 1200GW Web Management setSysAdm strcpy buffer overflow
CVSS 8.8
CVE-2026-7454 HIGH
WRL File Parsing Memory Corruption in Autodesk 3ds Max
CVSS 7.8
CVE-2026-7452 HIGH
WRL File Parsing Memory Corruption in Autodesk 3ds Max
CVSS 7.8
CVE-2026-48696 MEDIUM
FastNetMon Community Edition <= 1.2.9 - Buffer Overflow
CVSS 6.2
CVE-2026-48686 CRITICAL
FastNetMon Community Edition <= 1.2.9 - Stack-Based Buffer Overflow in BGP NLRI Decoder
CVSS 9.8
CVE-2026-9443 HIGH
Edimax BR-6478AC POST Request formL2TPSetup buffer overflow
CVSS 8.8
CVE-2026-9442 HIGH
Edimax BR-6478AC POST Request formiNICSiteSurvey buffer overflow
CVSS 8.8
Details
Vulnerabilities 4,334
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits