CWE-120

High likelihood

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Parent: CWE-787 - Out-of-bounds Write

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

4,100 vulnerabilities with CWE-120
CVE-2023-23494 MEDIUM
Apple Ipados < 16.4 - Buffer Overflow
CVSS 5.3
CVE-2023-22786 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-22785 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-22784 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-22783 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-22782 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-22781 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-22780 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-22779 CRITICAL
HP Arubaos < 10.3.1.0 - Buffer Overflow
CVSS 9.8
CVE-2023-30257 HIGH
Fiio M6 Firmware - Buffer Overflow
CVSS 7.8
CVE-2023-29932 MEDIUM
Llvm - Memory Corruption
CVSS 5.5
CVE-2023-21504 MEDIUM
Samsung Android - Improper Input Validation
CVSS 5.6
CVE-2023-21503 MEDIUM
Samsung Android - Improper Input Validation
CVSS 5.6
CVE-2023-21494 MEDIUM
Samsung Android - Improper Input Validation
CVSS 5.6
CVE-2023-27892 LOW
Shapeshift Keepkey Firmware < 7.7.0 - Buffer Overflow
CVSS 3.8
CVE-2023-29856 CRITICAL
Dlink Dir-868l Firmware - Buffer Overflow
CVSS 9.8
CVE-2023-22924 MEDIUM
Zyxel Nbg-418n Firmware < 1.00\(aarp.13\)c0 - Buffer Overflow
CVSS 4.9
CVE-2023-22922 HIGH
Zyxel Nbg-418n Firmware < 1.00\(aarp.13\)c0 - Buffer Overflow
CVSS 7.5
CVE-2023-27972 CRITICAL
HP Laserjet Pro M304-m305 W1a46a Firmware - Buffer Overflow
CVSS 9.8
CVE-2023-27971 CRITICAL
HP Laserjet Pro M304-m305 W1a46a Firmware - Buffer Overflow
CVSS 9.8
CVE-2023-28769 CRITICAL
Zyxel DX5401-B0 - Buffer Overflow
CVSS 9.8
CVE-2023-30280 CRITICAL
Netgear R6900 Firmware - Buffer Overflow
CVSS 9.8
CVE-2023-29596 HIGH
Cmix - Buffer Overflow
CVSS 7.8
CVE-2023-26930 MEDIUM
XPDF <4.04 - Buffer Overflow
CVSS 5.5
CVE-2023-22917 HIGH
Zyxel Usg Flex 100 Firmware < 5.32 - Buffer Overflow
CVSS 7.5
Details
Vulnerabilities 4,100
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits