CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,099 vulnerabilities with CWE-120
CVE-2024-46552 HIGH
Draytek Vigor3910 Firmware - Buffer Overflow
CVSS 7.5
CVE-2024-46551 HIGH
Draytek Vigor3910 Firmware - Buffer Overflow
CVSS 7.5
CVE-2024-46550 HIGH
Draytek Vigor3910 Firmware - Buffer Overflow
CVSS 7.5
CVE-2024-44160 MEDIUM
Apple Macos < 13.7 - Denial of Service
CVSS 5.5
CVE-2024-46419 CRITICAL
Totolink T8 Firmware - Buffer Overflow
CVSS 9.8
CVE-2024-46451 CRITICAL
Totolink T8 Firmware - Buffer Overflow
CVSS 9.8
CVE-2024-46424 HIGH
Totolink T8 Firmware - Buffer Overflow
CVSS 7.5
CVE-2024-46045 CRITICAL
Tenda Ch22 Firmware - Out-of-Bounds Write
CVSS 9.8
CVE-2024-24972 MEDIUM
Gallagher Controller <9.10.240816a - DoS
CVSS 6.5
CVE-2024-40659 MEDIUM
AndroidKeyStore - DoS
CVSS 5.5
CVE-2024-8579 HIGH
TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 - Buffer Overflow
CVSS 8.8
CVE-2024-8578 HIGH
TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 - Buffer Overflow
CVSS 8.8
CVE-2024-8577 HIGH
Totolink T8 Firmware - Buffer Overflow
CVSS 8.8
CVE-2024-8576 HIGH
Totolink T8 Firmware - Buffer Overflow
CVSS 8.8
CVE-2024-8575 HIGH
TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 - Buffer Overflow
CVSS 8.8
CVE-2024-8573 HIGH
Totolink T8 Firmware - Memory Corruption
CVSS 8.8
CVE-2024-32763 HIGH
Qnap Qts - Heap Buffer Overflow
CVSS 8.8
CVE-2024-42642 MEDIUM
Micron Crucial MX500 Series - Buffer Overflow
CVSS 6.7
CVE-2024-45620 LOW
Redhat Enterprise Linux < 0.26.0 - Buffer Overflow
CVSS 3.9
CVE-2024-45619 MEDIUM
Redhat Enterprise Linux < 0.26.0 - Buffer Overflow
CVSS 4.3
CVE-2024-41433 CRITICAL
Pingcap Tidb - Buffer Overflow
CVSS 9.8
CVE-2024-41436 HIGH
Clickhouse - Buffer Overflow
CVSS 7.5
CVE-2024-41435 HIGH
Yugabytedb - Buffer Overflow
CVSS 7.5
CVE-2024-6343 MEDIUM
Zyxel Zld < 5.39 - Buffer Overflow
CVSS 4.9
CVE-2024-5412 HIGH
Zyxel Nebula Lte3301-plus Firmware - Buffer Overflow
CVSS 7.5
Details
Vulnerabilities 4,099
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits