cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 45

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.9CVE-2023-50821EPSS 0.2%

    A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC W…

  2. 6.2CVE-2024-23079EPSS 0.2%

    JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). NOTE: this is disputed by multiple third parties who believe there was not reas…

  3. 6.3CVE-2023-52364EPSS 0.3%

    Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.

  4. 5.3CVE-2023-52551EPSS 0.1%

    Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  5. 7.5CVE-2023-52550EPSS 0.3%

    Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  6. 7.5CVE-2023-52549EPSS 0.3%

    Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  7. 4.4CVE-2023-52346EPSS 0.09%

    In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed

  8. 6.5CVE-2024-31951EPSS 0.5%

    In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths …

  9. 6.5CVE-2024-31950EPSS 0.5%

    In FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

  10. 4.9CVE-2024-27908EPSS 0.5%

    A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial of service.

  11. 7.8CVE-2024-26797EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent potential buffer overflow in map_hw_resources Adds a check in the map_hw_resources function to prevent a potential buffer overflow. The function…

  12. 5.5CVE-2024-26785EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix protection fault in iommufd_test_syz_conv_iova Syzkaller reported the following bug: general protection fault, probably for non-canonical address 0xdffff…

  13. 7.2CVE-2024-26768EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC] With default config, the value of NR_CPUS is 64. When HW platform has more then 64 cpus, system w…

  14. 9.8CVE-2024-30620EPSS 0.8%

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan.

  15. 3.0CVE-2023-6948EPSS 0.2%

    A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing …

  16. 9.8CVE-2024-21463EPSS 0.3%

    Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

  17. 7.8CVE-2023-43515EPSS 0.1%

    Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.

  18. 7.8CVE-2023-33023EPSS 0.1%

    Memory corruption while processing finish_sign command to pass a rsp buffer.

  19. 7.8CVE-2023-28547EPSS 0.1%

    Memory corruption in SPS Application while requesting for public key in sorter TA.

  20. 7.3CVE-2024-27619EPSS 0.8%

    Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server al…

  21. 9.8CVE-2024-30635EPSS 0.8%

    Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function.

  22. 9.8CVE-2024-30602EPSS 0.7%

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.

  23. 9.8CVE-2024-30584EPSS 0.9%

    Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.

  24. 9.8CVE-2024-30593EPSS 0.8%

    Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function.

  25. 9.1CVE-2023-45929EPSS 0.7%

    S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

  26. 6.2CVE-2024-25580EPSS 0.3%

    An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.

  27. 8.8CVE-2024-25395EPSS 1.0%

    A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.

  28. 4.3CVE-2024-25394EPSS 0.6%

    A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character.

  29. 9.8CVE-2024-2452EPSS 0.9%

    In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an allocation smaller than expected. This could cause subsequent heap buffer overflows.

  30. 7.8CVE-2023-6175EPSS 3.5%

    NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

  31. 8.1CVE-2024-29195EPSS 5.0%

    The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparou…

  32. 7.5CVE-2023-47430EPSS 0.6%

    Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer() function at tivo_commands.c.

  33. 5.5CVE-2021-47172EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers Channel numbering must start at 0 and then not have any holes, or it is possible to overfl…

  34. 5.3CVE-2024-29244EPSS 0.5%

    Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pin_code_3g parameter at /apply.cgi.

  35. 9.8CVE-2024-29243EPSS 0.8%

    Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpn_client_ip parameter at /apply.cgi.

  36. 7.8CVE-2024-28583EPSS 0.4%

    Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when reading images in XPM format.

  37. 5.5CVE-2024-28576EPSS 0.3%

    Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tcp_destroy() function when reading images in J2K format.

  38. 5.5CVE-2024-28570EPSS 0.3%

    Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the processMakerNote() function when reading images in JPEG format.

  39. 7.8CVE-2024-28569EPSS 0.3%

    Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::Xdr::read() function when reading images in EXR format.

  40. 5.5CVE-2024-28565EPSS 0.4%

    Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser::ReadImageData() function when reading images in PSD format.

  41. 6.2CVE-2024-28564EPSS 0.5%

    Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::CharPtrIO::readChars() function when reading images in EXR format.

  42. 7.8CVE-2023-52614EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflow in trans_stat_show(). Convert simple snprintf to the more secure scnprintf with size of PAGE_SI…

  43. 7.8CVE-2023-52612EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow prob…

  44. 9.8CVE-2024-28639EPSS 1.2%

    Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.

  45. 10.0CVE-2024-25139EPSS 0.9%

    In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-…

  46. 8.8CVE-2015-10123EPSS 0.6%

    An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full a…

  47. 9.8CVE-2024-22039EPSS 0.8%

    A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X20…

  48. 4.4CVE-2024-27225EPSS 0.09%

    In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi…

  49. 6.2CVE-2024-25984EPSS 0.09%

    In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed fo…

  50. 9.8CVE-2024-2331EPSS 0.6%

    A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulnerability affects the function ad_writedata of the file System.cpp. The manipulation of the argument ad_code leads to bu…