cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 48

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2023-47091EPSS 0.5%

    An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making a…

  2. 9.8CVE-2023-51771EPSS 0.7%

    In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI.

  3. 9.8CVE-2023-7095EPSS 14%

    A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handle…

  4. 7.5CVE-2023-48704EPSS 0.5%

    ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially craft…

  5. 9.8CVE-2023-50986EPSS 0.8%

    Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.

  6. 9.8CVE-2023-50628EPSS 1.3%

    Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive information via parser.c component.

  7. 9.8CVE-2023-50044EPSS 0.9%

    Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.

  8. 7.5CVE-2023-6711EPSS 0.7%

    Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buff…

  9. 9.8CVE-2023-6906EPSS 1.8%

    A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation…

  10. 7.5CVE-2023-50784EPSS 1.9%

    A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet (if a websocket port is open). Remote code execution might be possi…

  11. 9.8CVE-2023-50469EPSS 8.9%

    Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at /apply.cgi.

  12. 8.2CVE-2023-37457EPSS 1.1%

    Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEA…

  13. 7.6CVE-2023-42801EPSS 0.9%

    Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit f57bd745b4cbed577ea654fad4701bea4d38b44c. A malicious game streaming serve…

  14. 8.8CVE-2023-42800EPSS 1.9%

    Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit 50c0a51b10ecc5b3415ea78c21d96d679e2288f9 due to unmitigated usage of unsaf…

  15. 8.8CVE-2023-42799EPSS 1.9%

    Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit 50c0a51b10ecc5b3415ea78c21d96d679e2288f9 due to unmitigated usage of unsaf…

  16. 6.5CVE-2023-25642EPSS 0.5%

    There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack.

  17. 5.5CVE-2023-50268EPSS 0.4%

    jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue.

  18. 5.5CVE-2023-50246EPSS 0.5%

    jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.

  19. 5.3CVE-2023-49993EPSS 0.4%

    Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c.

  20. 5.3CVE-2023-49990EPSS 0.4%

    Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c.

  21. 7.5CVE-2023-46284EPSS 0.9%

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation…

  22. 7.5CVE-2023-46283EPSS 0.9%

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation…

  23. 9.8CVE-2023-50245EPSS 1.1%

    OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue is fixed in version 0.6.1.

  24. 7.2CVE-2023-32975EPSS 0.9%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  25. 7.2CVE-2023-32968EPSS 0.8%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  26. 8.8CVE-2023-49468EPSS 0.9%

    Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc.

  27. 9.8CVE-2023-41913EPSS 2.3%

    strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur …

  28. 7.8CVE-2023-33092EPSS 0.2%

    Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

  29. 7.8CVE-2023-33087EPSS 0.2%

    Memory corruption in Core while processing RX intent request.

  30. 9.8CVE-2023-33083EPSS 0.6%

    Memory corruption in WLAN Host while processing RRM beacon on the AP.

  31. 9.8CVE-2023-33082EPSS 0.5%

    Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

  32. 7.8CVE-2023-33024EPSS 0.2%

    Memory corruption while sending SMS from AP firmware.

  33. 7.8CVE-2023-33017EPSS 0.2%

    Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

  34. 7.8CVE-2023-28580EPSS 0.2%

    Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

  35. 7.8CVE-2023-28579EPSS 0.2%

    Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

  36. 7.8CVE-2023-28546EPSS 0.1%

    Memory Corruption in SPS Application while exporting public key in sorter TA.

  37. 9.8CVE-2023-49287EPSS 1.9%

    TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.

  38. 6.7CVE-2023-32860EPSS 0.1%

    In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  39. 6.7CVE-2023-32859EPSS 0.1%

    In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08…

  40. 7.5CVE-2023-47307EPSS 0.8%

    Buffer Overflow vulnerability in /apply.cgi in Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 allows attackers to cause a denial of service via the ApCliAuthMode parameter.

  41. 9.1CVE-2023-5908EPSS 1.0%

    KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

  42. 7.5CVE-2023-49700EPSS 0.4%

    Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.

  43. 7.5CVE-2023-24294EPSS 0.8%

    Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification.

  44. 4.4CVE-2023-4397EPSS 0.2%

    A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allow an authenticated …

  45. 5.5CVE-2023-37926EPSS 0.2%

    A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versi…

  46. 9.8CVE-2023-4590EPSS 1.1%

    Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.

  47. 9.8CVE-2023-49208EPSS 0.9%

    scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration.

  48. 9.8CVE-2023-28812EPSS 1.0%

    There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to computers installed with this plug-in, which could lead to arbitrary code execution or ca…

  49. 6.5CVE-2023-28811EPSS 0.4%

    There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatc…

  50. 8.1CVE-2023-43887EPSS 1.0%

    Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::dump.