cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 50

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2023-5753EPSS 1.0%

    Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c

  2. 7.8CVE-2023-43250EPSS 0.7%

    XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

  3. 7.5CVE-2023-36321EPSS 1.1%

    Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.c.

  4. 9.8CVE-2023-4257EPSS 1.1%

    Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.

  5. 8.8CVE-2023-4263EPSS 0.5%

    Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

  6. 7.2CVE-2023-32973EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  7. 7.5CVE-2023-45468EPSS 0.8%

    Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  8. 7.5CVE-2023-45464EPSS 0.7%

    Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  9. 7.5CVE-2023-45463EPSS 0.7%

    Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  10. 7.8CVE-2023-32722EPSS 0.8%

    The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open.

  11. 9.8CVE-2023-35056EPSS 1.1%

    A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerabili…

  12. 9.8CVE-2023-35055EPSS 1.1%

    A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerabili…

  13. 8.1CVE-2023-26320EPSS 1.1%

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

  14. 7.2CVE-2023-26319EPSS 1.0%

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

  15. 7.2CVE-2023-26318EPSS 0.6%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.

  16. 7.8CVE-2023-43896EPSS 0.4%

    A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code.

  17. 9.8CVE-2023-45199EPSS 1.3%

    Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.

  18. 7.5CVE-2023-43615EPSS 0.9%

    Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.

  19. 9.8CVE-2023-3725EPSS 1.3%

    Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem

  20. 7.2CVE-2023-32972EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  21. 7.2CVE-2023-32971EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  22. 7.5CVE-2023-44839EPSS 8.9%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  23. 7.5CVE-2023-44838EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  24. 7.5CVE-2023-44837EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  25. 7.5CVE-2023-44836EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  26. 7.5CVE-2023-44835EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  27. 7.5CVE-2023-44834EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  28. 7.5CVE-2023-44833EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  29. 7.5CVE-2023-44832EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  30. 7.5CVE-2023-44831EPSS 1.1%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  31. 7.5CVE-2023-44830EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  32. 7.5CVE-2023-44829EPSS 1.0%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  33. 7.5CVE-2023-44828EPSS 0.9%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPasswdSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  34. 9.8CVE-2023-35803EPSS 1.6%

    IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

  35. 9.8CVE-2023-40830EPSS 0.8%

    Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.

  36. 7.8CVE-2023-33035EPSS 0.1%

    Memory corruption while invoking callback function of AFE from ADSP.

  37. 7.8CVE-2023-28539EPSS 0.1%

    Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.

  38. 7.8CVE-2023-22384EPSS 0.1%

    Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

  39. 7.8CVE-2023-43907EPSS 0.5%

    OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.

  40. 8.8CVE-2023-44466EPSS 45%

    An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of a…

  41. 7.5CVE-2023-43314EPSS 0.8%Unsupported when assigned

    The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted uid.

  42. 8.8CVE-2023-5184EPSS 0.4%

    Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.

  43. 9.6CVE-2023-4264EPSS 1.1%

    Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.

  44. 10.0CVE-2023-4260EPSS 0.9%

    Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.

  45. 8.8CVE-2023-4259EPSS 0.8%

    Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.

  46. 9.8CVE-2023-43131EPSS 1.1%

    General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.

  47. 7.5CVE-2023-41299EPSS 0.5%

    DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

  48. 7.5CVE-2023-39409EPSS 0.5%

    DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

  49. 7.5CVE-2023-39408EPSS 0.4%

    DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

  50. 9.8CVE-2023-23364EPSS 0.9%

    A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the…