cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 49

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.7CVE-2023-6238EPSS 0.3%

    A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overw…

  2. 8.8CVE-2023-4424EPSS 0.4%

    An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device.

  3. 9.8CVE-2023-38823EPSS 1.2%

    Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.

  4. 5.5CVE-2023-47217EPSS 0.2%

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow.

  5. 6.5CVE-2023-47471EPSS 0.8%

    Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the slice.cc component.

  6. 7.5CVE-2023-47347EPSS 0.7%

    Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes.

  7. 7.5CVE-2023-47345EPSS 0.9%

    Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.

  8. 9.8CVE-2023-45616EPSS 2.1%

    There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol)…

  9. 9.8CVE-2023-45615EPSS 2.1%

    There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port …

  10. 9.8CVE-2023-45614EPSS 2.1%

    There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port …

  11. 7.5CVE-2023-39206EPSS 1.1%

    Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

  12. 7.5CVE-2023-39204EPSS 1.1%

    Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.

  13. 6.7CVE-2023-29177EPSS 0.2%

    Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbit…

  14. 7.8CVE-2023-28741EPSS 0.2%

    Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

  15. 9.8CVE-2023-43504EPSS 0.9%

    A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This cou…

  16. 7.5CVE-2023-47346EPSS 0.8%

    Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages.

  17. 4.3CVE-2023-47625EPSS 0.5%

    PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParser_TryParseCrsfPacket function in /src/drivers/rc/crsf_rc/CrsfParser.cpp:298 due to the invalid size c…

  18. 9.8CVE-2023-47610EPSS 1.7%

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS m…

  19. 6.7CVE-2023-43581EPSS 0.2%

    A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  20. 6.7CVE-2023-43580EPSS 0.2%

    A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  21. 6.7CVE-2023-43579EPSS 0.2%

    A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  22. 6.7CVE-2023-43578EPSS 0.2%

    A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  23. 6.7CVE-2023-43577EPSS 0.2%

    A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  24. 6.7CVE-2023-43576EPSS 0.2%

    A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  25. 6.7CVE-2023-43575EPSS 0.2%

    A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  26. 6.7CVE-2023-43573EPSS 0.2%

    A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  27. 6.7CVE-2023-43571EPSS 0.2%

    A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  28. 6.7CVE-2023-5075EPSS 0.2%

    A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code.

  29. 6.7CVE-2023-43569EPSS 0.2%

    A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  30. 6.7CVE-2023-43567EPSS 0.2%

    A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

  31. 5.5CVE-2023-46363EPSS 0.3%

    jbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512.

  32. 7.5CVE-2023-41112EPSS 0.6%

    An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). A buffer …

  33. 5.5CVE-2023-46001EPSS 0.3%

    Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51 function in gf_isom_get_user_data.

  34. 7.8CVE-2023-33055EPSS 0.1%

    Memory Corruption in Audio while invoking callback function in driver from ADSP.

  35. 9.8CVE-2023-33045EPSS 0.5%

    Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

  36. 7.8CVE-2023-33031EPSS 0.1%

    Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

  37. 7.8CVE-2023-28570EPSS 0.1%

    Memory corruption while processing audio effects.

  38. 5.5CVE-2023-5748EPSS 0.2%

    Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors.

  39. 8.8CVE-2023-47004EPSS 1.0%

    Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.

  40. 7.5CVE-2023-46847EPSS 79%

    Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

  41. 9.8CVE-2023-42299EPSS 1.3%

    Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_subimage_data function.

  42. 5.5CVE-2023-3164EPSS 0.3%

    A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.

  43. 7.5CVE-2023-4452EPSS 0.5%

    A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling…

  44. 9.8CVE-2023-46256EPSS 0.7%

    PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of `parserbuf_index` value checking. A malfun…

  45. 9.8CVE-2023-45797EPSS 0.9%

    A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.

  46. 7.8CVE-2023-46587EPSS 0.2%

    Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.

  47. 7.5CVE-2023-46852EPSS 0.9%

    In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring.

  48. 8.8CVE-2022-34886EPSS 1.1%

    A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.

  49. 9.8CVE-2018-17878EPSS 1.0%

    Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf() function.

  50. 7.8CVE-2023-5139EPSS 0.5%

    Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver