CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,100 vulnerabilities with CWE-120
CVE-2024-39134 HIGH
Gdraheim Zziplib - Buffer Overflow
CVSS 7.5
CVE-2024-39207 HIGH
lua-shmem <1.0-1 - Buffer Overflow
CVSS 8.2
CVE-2024-39129 MEDIUM
DumpTS <0.1.0-nightly - DoS
CVSS 5.3
CVE-2024-37571 MEDIUM
SAS Broker 9.2 - Buffer Overflow
CVSS 4.3
CVE-2024-38952 HIGH
Dronecode Px4 Drone Autopilot - Buffer Overflow
CVSS 7.5
CVE-2024-38951 MEDIUM
Dronecode Px4 Drone Autopilot - Buffer Overflow
CVSS 6.5
CVE-2024-4640 HIGH
Moxa Oncell G3470a-lte-us-t Firmware < 1.7.7 - Buffer Overflow
CVSS 7.1
CVE-2024-39291 HIGH
Linux Kernel < 6.6.33 - Buffer Overflow
CVSS 7.8
CVE-2024-33278 CRITICAL
ASUS router RT-AX88U <v3.0.0.4.388_24198 - Buffer Overflow
CVSS 9.8
CVE-2024-38577 HIGH
Linux kernel - Buffer Overflow
CVSS 7.8
CVE-2024-38576 HIGH
Linux kernel - Buffer Overflow
CVSS 7.1
CVE-2024-38541 CRITICAL
Linux kernel - Buffer Overflow
CVSS 9.8
CVE-2024-6143 HIGH
Actiontec WCB6200Q - Buffer Overflow
CVSS 8.8
CVE-2024-6142 HIGH
Actiontec WCB6200Q - Buffer Overflow
CVSS 8.8
CVE-2024-37305 HIGH
oqs-provider - Memory Corruption
CVSS 8.2
CVE-2024-24320 HIGH
Mgt-commerce Cloudpanel < 2.4.0 - Path Traversal
CVSS 8.8
CVE-2024-37637 CRITICAL
Totolink A3700r Firmware - Buffer Overflow
CVSS 9.8
CVE-2024-0099 HIGH
NVIDIA vGPU - Buffer Overflow
CVSS 7.8
CVE-2024-32907 HIGH
Google Android - Improper Input Validation
CVSS 7.8
CVE-2024-37635 CRITICAL
Totolink A3700r Firmware - Buffer Overflow
CVSS 9.8
CVE-2024-37632 CRITICAL
Totolink A3700r Firmware - Buffer Overflow
CVSS 9.8
CVE-2024-36760 HIGH
Rhai 1.18.0 - Buffer Overflow
CVSS 7.5
CVE-2024-37040 MEDIUM
Schneider-electric Sage Rtu Firmware - Buffer Overflow
CVSS 5.4
CVE-2024-36650 HIGH
TOTOLINK AC1200 Router A3100R Firmware - Buffer Overflow in setNoticeCfg
CVSS 7.5
CVE-2024-24192 CRITICAL
Robertdavidgraham Robdns - Buffer Overflow
CVSS 9.1
Details
Vulnerabilities 4,100
Exploit Likelihood High