cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 46

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-23286EPSS 1.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, wa…

  2. 7.8CVE-2024-25817EPSS 0.3%

    Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components.

  3. 7.5CVE-2023-32331EPSS 0.7%

    IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. IBM X-Force ID: 254979.

  4. 7.8CVE-2021-47107EPSS 0.8%

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), then the buffer size calculation in the new init_dirlist help…

  5. 7.8CVE-2024-0156EPSS 0.2%

    Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation.

  6. 9.8CVE-2023-43548EPSS 0.3%

    Memory corruption while parsing qcp clip with invalid chunk data size.

  7. 7.8CVE-2023-43540EPSS 0.1%

    Memory corruption while processing the IOCTL FM HCI WRITE request.

  8. 9.8CVE-2023-28582EPSS 0.4%

    Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

  9. 7.5CVE-2024-27572EPSS 0.7%

    LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  10. 8.6CVE-2024-20267EPSS 0.9%

    A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traff…

  11. 9.8CVE-2023-6881EPSS 0.4%

    Possible buffer overflow in is_mount_point

  12. 7.8CVE-2021-47040EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: io_uring: fix overflows checks in provide buffers Colin reported before possible overflow and sign extension problems in io_provide_buffers_prep(). As Linus pointed out …

  13. 7.5CVE-2024-1786EPSS 2.7%Unsupported when assigned

    A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads to buffer o…

  14. 7.5CVE-2024-24479EPSS 1.3%

    A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor …

  15. 8.8CVE-2024-24474EPSS 1.4%

    QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because o…

  16. 3.3CVE-2024-25196EPSS 0.3%

    Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vulnerability is triggerd via sending a crafted .yaml file.

  17. 7.5CVE-2024-26134EPSS 1.2%

    cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR bin…

  18. 7.4CVE-2023-52377EPSS 0.4%

    Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.

  19. 9.8CVE-2023-52370EPSS 0.5%

    Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.

  20. 7.5CVE-2023-52366EPSS 0.4%

    Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

  21. 5.3CVE-2023-52365EPSS 0.3%

    Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

  22. 4.6CVE-2024-25373EPSS 0.4%

    Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function.

  23. 7.8CVE-2024-20723EPSS 0.4%

    Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that…

  24. 6.5CVE-2022-23093EPSS 2.4%

    ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a "quoted packet," which represents the pack…

  25. 8.2CVE-2022-23085EPSS 0.5%

    A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow. This insufficient bounds checking could lead to kernel memory corruption. On systems configured to include netmap in their devfs_ruleset, …

  26. 7.8CVE-2024-25165EPSS 0.5%

    A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex.

  27. 9.8CVE-2023-43519EPSS 0.3%

    Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

  28. 7.8CVE-2023-33077EPSS 0.1%

    Memory corruption in HLOS while converting from authorization token to HIDL vector.

  29. 7.8CVE-2023-33072EPSS 0.1%

    Memory corruption in Core while processing control functions.

  30. 7.8CVE-2023-33069EPSS 0.1%

    Memory corruption in Audio while processing the calibration data returned from ACDB loader.

  31. 7.8CVE-2023-33068EPSS 0.1%

    Memory corruption in Audio while processing IIR config data from AFE calibration block.

  32. 7.2CVE-2023-45037EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  33. 7.2CVE-2023-45036EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  34. 7.2CVE-2023-45035EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  35. 7.2CVE-2023-41292EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  36. 7.2CVE-2023-41280EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  37. 7.2CVE-2023-41279EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  38. 7.2CVE-2023-41278EPSS 0.5%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  39. 7.2CVE-2023-41277EPSS 0.5%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  40. 7.2CVE-2023-41276EPSS 0.5%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  41. 7.2CVE-2023-41275EPSS 0.5%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  42. 7.2CVE-2023-41273EPSS 0.6%

    A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed t…

  43. 9.8CVE-2024-0338EPSS 0.5%

    A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long file debug argument that controls the Structured Exception Handler (SEH).

  44. 7.5CVE-2024-24736EPSS 1.2%

    The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port 110, a related issue to CVE-2004-1558.

  45. 9.8CVE-2024-23621EPSS 1.9%

    A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution.

  46. 8.8CVE-2024-23617EPSS 1.7%

    A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.

  47. 9.8CVE-2024-23616EPSS 1.9%

    A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.

  48. 9.8CVE-2024-23615EPSS 1.9%

    A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

  49. 9.8CVE-2024-23614EPSS 1.6%

    A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

  50. 9.8CVE-2024-23613EPSS 1.8%

    A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.