CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,100 vulnerabilities with CWE-120
CVE-2023-35979 MEDIUM
ArubaOS - DoS
CVSS 5.3
CVE-2023-24851 HIGH
Qualcomm WLAN HOST - Memory Corruption
CVSS 7.8
CVE-2023-22386 HIGH
Qualcomm WLAN HOST - Memory Corruption
CVSS 7.8
CVE-2023-21640 MEDIUM
Linux <file upload API> - Memory Corruption
CVSS 6.7
CVE-2023-21639 MEDIUM
Qualcomm Audio Component Firmware - Memory Corruption
CVSS 6.7
CVE-2023-21635 MEDIUM
Product Name - Memory Corruption
CVSS 6.7
CVE-2023-36377 HIGH
mtrojnar osslsigncode <2.3 - Buffer Overflow
CVSS 7.8
CVE-2023-36183 HIGH
OpenImageIO <2.4.12.0 - RCE
CVSS 7.8
CVE-2023-35178 HIGH
HP Laserjet Pro Mfp M478-m479 W1a75a Firmware - Buffer Overflow
CVSS 8.8
CVE-2023-35176 HIGH
HP Laserjet Pro Mfp M478-m479 W1a75a Firmware - Buffer Overflow
CVSS 8.8
CVE-2023-26966 MEDIUM
libtiff <4.5.0 - Buffer Overflow
CVSS 5.5
CVE-2023-25433 MEDIUM
Libtiff - Buffer Overflow
CVSS 5.5
CVE-2023-26616 CRITICAL
D-Link DIR-823G <1.02B05 - Buffer Overflow
CVSS 9.8
CVE-2023-26612 CRITICAL
D-Link DIR-823G <1.02B05 - Buffer Overflow
CVSS 9.8
CVE-2023-21517 HIGH
Exynos <SMR Jun-2023 Release 1 - RCE
CVSS 8.8
CVE-2023-32423 MEDIUM
Apple Safari < 16.5 - Buffer Overflow
CVSS 6.5
CVE-2023-32384 HIGH
Apple Ipados < 15.7.6 - Buffer Overflow
CVSS 7.8
CVE-2023-23539 HIGH
Apple Macos < 13.2 - Buffer Overflow
CVSS 7.8
CVE-2023-36359 HIGH
TP-Link - Buffer Overflow
CVSS 7.5
CVE-2023-36358 HIGH
TP-Link - Buffer Overflow
CVSS 7.7
CVE-2023-36355 CRITICAL
TP-Link TL-WR940N V4 - Buffer Overflow
CVSS 9.9
CVE-2023-36354 HIGH
TP-Link - DoS
CVSS 7.5
CVE-2023-36243 HIGH
FLVMeta v1.2.1 - Buffer Overflow
CVSS 7.8
CVE-2023-36239 HIGH
libming 0.4.7 - Buffer Overflow
CVSS 8.8
CVE-2023-25435 MEDIUM
Libtiff - Buffer Overflow
CVSS 5.5
Details
Vulnerabilities 4,100
Exploit Likelihood High