cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 54

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-26612EPSS 1.3%

    D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo.

  2. 9.8CVE-2023-21517EPSS 1.6%

    Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.

  3. 5.5CVE-2015-20109EPSS 0.3%

    end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash), as demonstrated by use of the fnmatch library functi…

  4. 6.5CVE-2023-32423EPSS 0.8%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information.

  5. 7.8CVE-2023-32384EPSS 0.3%

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processi…

  6. 7.8CVE-2023-23539EPSS 0.4%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

  7. 7.5CVE-2023-36359EPSS 0.8%

    TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via …

  8. 7.7CVE-2023-36358EPSS 0.7%

    TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Servic…

  9. 9.9CVE-2023-36355ExploitEPSS 32%

    TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

  10. 7.5CVE-2023-36354EPSS 0.8%

    TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a De…

  11. 7.8CVE-2023-36243EPSS 0.3%

    FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c.

  12. 8.8CVE-2023-36239EPSS 0.7%

    libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.

  13. 5.5CVE-2023-25435EPSS 0.3%

    libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.

  14. 6.8CVE-2023-0970EPSS 0.3%

    Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.

  15. 9.8CVE-2023-34563EPSS 14%

    netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

  16. 9.8CVE-2020-20703EPSS 1.5%

    Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.

  17. 7.5CVE-2022-48501EPSS 0.4%

    Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

  18. 7.5CVE-2022-48497EPSS 0.4%

    Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

  19. 7.5CVE-2022-48490EPSS 0.4%

    Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

  20. 9.8CVE-2023-35856EPSS 1.1%

    A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet.

  21. 9.8CVE-2023-35855EPSS 1.1%

    A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.

  22. 9.8CVE-2023-34832EPSS 1.4%

    TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4.

  23. 9.8CVE-2023-2686EPSS 0.8%

    Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack.

  24. 5.5CVE-2023-21143EPSS 0.08%

    In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is n…

  25. 5.5CVE-2023-21136EPSS 0.1%

    In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is no…

  26. 7.8CVE-2023-21135EPSS 0.09%

    In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed…

  27. 9.8CVE-2023-1329EPSS 1.5%

    A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected prod…

  28. 8.8CVE-2023-25434EPSS 0.8%

    libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

  29. 9.8CVE-2022-28550EPSS 1.0%

    Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a re…

  30. 3.8CVE-2023-34115EPSS 0.3%

    Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to b…

  31. 9.8CVE-2023-32674EPSS 0.9%

    Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.

  32. 8.8CVE-2023-34336EPSS 0.7%

    AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of service, or escalation of privileges.

  33. 8.8CVE-2023-33457EPSS 0.8%

    In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash.

  34. 7.8CVE-2022-33230EPSS 0.1%

    Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

  35. 7.8CVE-2022-33226EPSS 0.1%

    Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

  36. 7.8CVE-2022-33224EPSS 0.1%

    Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

  37. 4.4CVE-2022-48439EPSS 0.09%

    In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  38. 6.5CVE-2023-27989EPSS 1.0%

    A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to…

  39. 6.5CVE-2023-32181EPSS 0.6%

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

  40. 6.5CVE-2023-22652EPSS 0.6%

    A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

  41. 9.8CVE-2023-24584EPSS 0.5%

    Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.…

  42. 9.8CVE-2021-45039EPSS 4.2%

    Multiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCMN) offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to ove…

  43. 7.5CVE-2023-32763EPSS 1.3%

    An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.

  44. 7.5CVE-2021-46886EPSS 0.4%

    The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.

  45. 7.5CVE-2021-46885EPSS 0.4%

    The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.

  46. 7.5CVE-2021-46884EPSS 0.4%

    The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.

  47. 7.5CVE-2021-46883EPSS 0.4%

    The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.

  48. 7.5CVE-2021-46882EPSS 0.4%

    The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.

  49. 7.5CVE-2021-46881EPSS 0.4%

    The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.

  50. 9.8CVE-2023-33010KEVEPSS 29%

    A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 …