cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 51

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-36109EPSS 2.4%

    Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.

  2. 9.8CVE-2023-42320EPSS 1.2%

    Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function.

  3. 9.8CVE-2023-36659EPSS 1.0%

    An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of communication).

  4. 8.8CVE-2022-48475EPSS 0.6%

    Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by …

  5. 7.5CVE-2023-39068EPSS 0.8%

    Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin allows a remote attacker to casue a denial of…

  6. 7.8CVE-2023-39063EPSS 0.4%

    Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard.

  7. 9.8CVE-2020-19320EPSS 1.1%

    Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.

  8. 9.8CVE-2020-19319EPSS 0.9%

    Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.

  9. 8.8CVE-2023-4582EPSS 0.9%

    Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory on mac OS. *This bug only affects Firefox on macOS. Other operating systems ar…

  10. 7.5CVE-2023-42278EPSS 0.8%

    hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

  11. 9.8CVE-2023-42277EPSS 0.9%

    hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

  12. 9.8CVE-2023-42276EPSS 0.9%

    hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.

  13. 7.8CVE-2023-41064KEVEPSS 53%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a malici…

  14. 7.8CVE-2023-3471EPSS 0.5%

    Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.

  15. 7.8CVE-2023-32379EPSS 0.3%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges.

  16. 7.8CVE-2023-32356EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  17. 7.8CVE-2023-28215EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  18. 7.8CVE-2023-28214EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  19. 7.8CVE-2023-28213EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  20. 7.8CVE-2023-28212EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  21. 7.8CVE-2023-28211EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  22. 7.8CVE-2023-28210EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  23. 7.8CVE-2023-28209EPSS 0.2%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

  24. 9.8CVE-2023-28562EPSS 0.4%

    Memory corruption while handling payloads from remote ESL.

  25. 7.8CVE-2023-28560EPSS 0.1%

    Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

  26. 7.8CVE-2023-28559EPSS 0.1%

    Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

  27. 7.8CVE-2023-28544EPSS 0.1%

    Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.

  28. 7.8CVE-2023-21664EPSS 0.1%

    Memory Corruption in Core Platform while printing the response buffer in log.

  29. 7.8CVE-2023-21662EPSS 0.1%

    Memory corruption in Core Platform while printing the response buffer in log.

  30. 7.5CVE-2023-40968EPSS 1.1%

    Buffer Overflow vulnerability in hzeller timg v.1.5.1 and before allows a remote attacker to cause a denial of service via the 0x61200000045c address.

  31. 9.8CVE-2023-36187EPSS 1.1%

    Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

  32. 7.5CVE-2022-46527EPSS 0.8%

    ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser.

  33. 7.5CVE-2023-40589EPSS 1.3%

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function ca…

  34. 4.4CVE-2023-4163EPSS 0.3%

    In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command.

  35. 7.5CVE-2023-38975EPSS 1.1%

    * Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component.

  36. 6.5CVE-2023-24548EPSS 0.5%

    On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be su…

  37. 9.8CVE-2023-41361EPSS 0.9%

    An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

  38. 7.5CVE-2023-40998EPSS 2.1%

    Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component.

  39. 7.5CVE-2023-40997EPSS 2.2%

    Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet.

  40. 7.5CVE-2023-36481EPSS 0.6%

    An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite…

  41. 5.5CVE-2023-40166EPSS 0.4%

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it …

  42. 5.5CVE-2023-40164EPSS 0.5%

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be use…

  43. 5.5CVE-2023-40036EPSS 0.4%

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. The exploitability of this issue is not clear. Potentially, it may…

  44. 7.8CVE-2023-40031EPSS 0.5%

    Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known …

  45. 7.5CVE-2023-36198EPSS 1.0%

    Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the trustedBlsSignMessage function.

  46. 5.5CVE-2023-39742EPSS 0.3%

    giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

  47. 6.7CVE-2022-3742EPSS 0.2%

    A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.

  48. 6.5CVE-2023-20168EPSS 0.2%

    A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly reload. This vulnerability is due to incorrect input validation…

  49. 9.8CVE-2023-4041EPSS 0.4%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code I…

  50. 5.5CVE-2022-29654EPSS 0.4%

    Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.