CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,334 vulnerabilities with CWE-120
CVE-2026-39869 MEDIUM
iOS and iPadOS < 18.7.9 - Denial of Service via Malicious Audio Stream
CVSS 4.3
CVE-2026-28959 HIGH
iOS and iPadOS < 18.7.9 - Buffer Overflow
CVSS 7.5
CVE-2026-28955 HIGH
iOS and iPadOS < 18.7.9 and < 26.5 - Memory Corruption via Malicious Web Content
CVSS 8.8
CVE-2026-28953 HIGH
iOS and iPadOS < 18.7.9 and < 26.5 - Memory Corruption via Malicious Web Content
CVSS 7.5
CVE-2026-28925 HIGH
macOS < 14.8.7, < 15.7.7, < 26.5 - Buffer Overflow
CVSS 7.5
CVE-2026-28905 HIGH
iOS and iPadOS < 26.5 - Memory Corruption via Malicious Web Content
CVSS 7.5
CVE-2026-28904 HIGH
iOS and iPadOS < 18.7.9 and < 26.5 - Memory Corruption via Malicious Web Content
CVSS 7.5
CVE-2026-28903 MEDIUM
iOS and iPadOS < 18.7.9 and < 26.5 - Memory Corruption via Malicious Web Content
CVSS 6.5
CVE-2026-28902 MEDIUM
iOS and iPadOS < 26.5 - Memory Corruption via Malicious Web Content
CVSS 6.5
CVE-2026-28901 MEDIUM
iOS and iPadOS < 26.5 - Memory Corruption via Malicious Web Content
CVSS 4.3
CVE-2026-28847 HIGH
iOS and iPadOS < 18.7.9 and < 26.5 - Memory Corruption via Malicious Web Content
CVSS 8.8
CVE-2026-42859 HIGH
Neat VNC: Buffer overflow due to oversized RSA public keys
CVE-2026-8260 HIGH
D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings buffer overflow
CVSS 8.8
CVE-2026-8137 HIGH
Totolink X5000R formDdns sub_458E40 buffer overflow
CVSS 8.8
CVE-2026-8093 HIGH
Memory safety bugs fixed in Firefox 150.0.2
CVSS 8.1
CVE-2026-6691 HIGH
MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow
CVSS 7.8
CVE-2026-7857 HIGH
D-Link DI-8100 CGI user_group.asp sprintf buffer overflow
CVSS 7.2
CVE-2026-7856 HIGH
D-Link DI-8100 Web Management url_member.asp buffer overflow
CVSS 7.2
CVE-2026-7855 HIGH
D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow
CVSS 8.8
CVE-2026-7854 CRITICAL
D-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow
CVSS 9.8
CVE-2026-7853 CRITICAL
D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow
CVSS 9.8
CVE-2026-34956 MEDIUM
Openvswitch: open vswitch: denial of service via malformed ftp epasv command
CVSS 5.9
CVE-2026-7750 HIGH
Totolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow
CVSS 8.8
CVE-2026-7749 HIGH
Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow
CVSS 8.8
CVE-2026-7748 HIGH
Totolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflow
CVSS 8.8
Details
Vulnerabilities 4,334
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits