CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,100 vulnerabilities with CWE-120
CVE-2024-2331 MEDIUM
Razormist Tourist Reservation System - Buffer Overflow
CVSS 6.3
CVE-2024-23286 HIGH
Apple Ipados < 16.7.6 - Buffer Overflow
CVSS 7.8
CVE-2024-25817 HIGH
Eza < 0.18.2 - Buffer Overflow
CVSS 7.8
CVE-2024-0156 HIGH
Dell Digital Delivery < 5.2.0.0 - Heap Buffer Overflow
CVSS 7.0
CVE-2024-27572 HIGH
LBT T300-T390 v2.2.1.8 - Buffer Overflow
CVSS 7.5
CVE-2024-20267 HIGH
Cisco NX-OS Software - DoS
CVSS 8.6
CVE-2024-1786 HIGH
Dlink Dir-600m Firmware - Buffer Overflow
CVSS 7.5
CVE-2024-24479 HIGH
Wireshark <4.2.0 - Buffer Overflow
CVSS 7.5
CVE-2024-24474 HIGH
QEMU <8.2.0 - Buffer Overflow
CVSS 8.8
CVE-2024-25196 LOW
Open Robotics ROS2 & Nav2 - Buffer Overflow
CVSS 3.3
CVE-2024-26134 HIGH
Agronholm Cbor2 < 5.6.2 - Buffer Overflow
CVSS 7.5
CVE-2024-25373 MEDIUM
Tenda AC10V4.0 V16.03.10.20 - Buffer Overflow
CVSS 4.6
CVE-2024-20723 HIGH
Substance3D - Painter <9.1.1 - Buffer Overflow
CVSS 7.8
CVE-2024-25165 HIGH
SWFTools 0.9.2 - Buffer Overflow
CVSS 7.8
CVE-2024-0338 HIGH
Apachefriends Xampp < 8.2.4 - Memory Corruption
CVSS 7.3
CVE-2024-24736 HIGH
YahooPOPs 1.6 - DoS
CVSS 7.5
CVE-2024-23621 CRITICAL
IBM Merge Efilm Workstation < 4.2 - Remote Code Execution
CVSS 10.0
CVE-2024-23617 CRITICAL
Broadcom Symantec Data Center Security Server - Memory Corruption
CVSS 9.6
CVE-2024-23616 CRITICAL
Broadcom Symantec Server Management Suite < 7.9 - Memory Corruption
CVSS 10.0
CVE-2024-23615 CRITICAL
Broadcom Symantec Messaging Gateway < 10.5 - Memory Corruption
CVSS 10.0
CVE-2024-23614 CRITICAL
Broadcom Symantec Messaging Gateway < 9.5 - Memory Corruption
CVSS 10.0
CVE-2024-23613 CRITICAL
Broadcom Symantec Deployment Solutions - Memory Corruption
CVSS 10.0
CVE-2024-22749 HIGH
GPAC <2.3 - Buffer Overflow
CVSS 7.8
CVE-2024-0732 MEDIUM
PCMan FTP Server 2.0.7 - DoS
CVSS 5.3
CVE-2024-0731 MEDIUM
PCMan FTP Server 2.0.7 - DoS
CVSS 5.3
Details
Vulnerabilities 4,100
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits