cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 34

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.2CVE-2024-36272EPSS 1.4%

    A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP req…

  2. 4.3CVE-2024-6352EPSS 0.3%

    A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert

  3. 9.8CVE-2025-22946EPSS 0.9%

    Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution.

  4. 6.8CVE-2024-48806EPSS 0.3%

    Buffer Overflow vulnerability in Neat Board NFC v.1.20240620.0015 allows a physically proximate attackers to escalate privileges via a crafted payload to the password field

  5. 8.0CVE-2024-54887EPSS 6.6%

    TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitra…

  6. 6.5CVE-2024-6350EPSS 0.3%

    A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the error condition automatically.

  7. 5.5CVE-2024-56456EPSS 0.1%

    Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

  8. 5.5CVE-2024-56455EPSS 0.1%

    Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

  9. 5.5CVE-2024-56454EPSS 0.1%

    Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

  10. 5.5CVE-2024-56453EPSS 0.1%

    Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

  11. 5.5CVE-2024-56452EPSS 0.1%

    Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

  12. 5.5CVE-2024-56450EPSS 0.1%

    Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability.

  13. 9.8CVE-2018-4301EPSS 0.6%

    This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp.

  14. 7.9CVE-2024-40427EPSS 0.3%

    Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute

  15. 7.5CVE-2024-46601EPSS 0.7%

    Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow.

  16. 7.8CVE-2024-45547EPSS 0.07%

    Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

  17. 7.8CVE-2024-45541EPSS 0.1%

    Memory corruption when IOCTL call is invoked from user-space to read board data.

  18. 7.8CVE-2024-21464EPSS 0.1%

    Memory corruption while processing IPA statistics, when there are no active clients registered.

  19. 7.8CVE-2024-47032EPSS 0.08%

    In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is …

  20. 6.9CVE-2024-12988EPSS 0.9%

    A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to…

  21. 5.5CVE-2024-56590EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet This fixes not checking if skb really contains an ACL header otherwise the code may attempt to acc…

  22. 7.8CVE-2024-56557EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer The AD7923 was updated to support devices with 8 channels, but the size of tx_buf and ring_xfer was not in…

  23. 7.8CVE-2024-53192EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access Flexible-array member `hws` in `struct clk_hw_onecell_data` is annotated with the `coun…

  24. 5.3CVE-2024-47864EPSS 0.6%

    home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down.

  25. 5.7CVE-2020-6923EPSS 0.3%

    The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.

  26. 9.3CVE-2024-12373EPSS 0.5%

    A denial-of-service vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in a buffer-overflow, potentially causing denial-of-service.

  27. 9.8CVE-2024-29646EPSS 0.9%

    Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.

  28. 7.8CVE-2024-12194EPSS 0.3%

    A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

  29. 6.5CVE-2024-37607EPSS 0.5%

    A Buffer overflow vulnerability in D-Link DAP-2555 REVA_FIRMWARE_1.20 allows remote attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

  30. 6.5CVE-2024-37606EPSS 0.5%

    A Stack overflow vulnerability in D-Link DCS-932L REVB_FIRMWARE_2.18.01 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

  31. 7.5CVE-2024-52949EPSS 0.7%

    iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.

  32. 9.8CVE-2024-29671EPSS 25%

    Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component.

  33. 8.3CVE-2024-52066EPSS 0.3%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.…

  34. 6.9CVE-2024-52065EPSS 0.2%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional on non-Windows (Persistence Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional:…

  35. 6.9CVE-2024-52064EPSS 0.2%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6…

  36. 8.3CVE-2024-52063EPSS 0.3%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 befor…

  37. 6.9CVE-2024-52062EPSS 0.2%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6…

  38. 8.3CVE-2024-52061EPSS 0.5%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Co…

  39. 8.3CVE-2024-52060EPSS 0.3%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer …

  40. 6.9CVE-2024-52059EPSS 0.2%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue …

  41. 6.3CVE-2024-31670EPSS 0.3%

    rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyldcache.c.

  42. 7.5CVE-2024-54105EPSS 0.2%

    Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

  43. 5.5CVE-2024-46657EPSS 0.3%

    Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

  44. 4.3CVE-2022-29974EPSS 0.3%

    AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver is, for example, used in certain ASUS devices.

  45. 9.8CVE-2024-55564EPSS 0.5%

    The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow.

  46. 4.8CVE-2024-12354EPSS 0.4%

    A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow…

  47. 7.1CVE-2024-12343EPSS 5.0%

    A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewCon…

  48. 9.8CVE-2024-38922EPSS 0.6%

    Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability is triggered via sending a crafted message to the component /initialpose.

  49. 9.8CVE-2024-37863EPSS 0.6%

    Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.

  50. 9.8CVE-2024-37861EPSS 0.6%

    Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.