cve.bz

CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 61

Filter

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

Ask an AI about CWE-120

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-120: Buffer Copy without Checking Size of Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/120.html and https://cve.bz/cve/cwe/120?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.2CVE-2022-45997EPSS 0.9%

    Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.

  2. 6.5CVE-2022-37910EPSS 0.7%

    A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in a denial of service on the affected system.

  3. 5.3CVE-2022-20687EPSS 1.0%

    Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device an…

  4. 9.8CVE-2022-23480EPSS 0.9%

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredir_proc_client_devlist_announce_req() function. There are …

  5. 9.8CVE-2022-23479EPSS 0.9%

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds …

  6. 9.8CVE-2022-23477EPSS 0.9%

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in audin_send_open() function. There are no known workarounds for t…

  7. 9.8CVE-2022-23468EPSS 0.8%

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_login_wnd_create() function. There are no known workarounds…

  8. 7.8CVE-2022-46824EPSS 0.2%

    In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.

  9. 7.8CVE-2022-44455EPSS 0.2%

    The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain…

  10. 3.3CVE-2022-41802EPSS 0.2%

    Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

  11. 5.5CVE-2022-42760EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  12. 5.5CVE-2022-42756EPSS 0.1%

    In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel.

  13. 7.5CVE-2022-45672EPSS 9.1%

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet function.

  14. 7.5CVE-2022-45671EPSS 0.9%

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData parameter in the formSetAppFilterRule function.

  15. 7.5CVE-2022-45670EPSS 0.9%

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

  16. 7.5CVE-2022-45669EPSS 0.9%

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterGet function.

  17. 7.5CVE-2022-45664EPSS 0.9%

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDget function.

  18. 7.5CVE-2022-45663EPSS 0.9%

    Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function.

  19. 7.5CVE-2022-45661EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in the setSmartPowerManagement function.

  20. 7.5CVE-2022-45660EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the schedStartTime parameter in the setSchedWifi function.

  21. 7.5CVE-2022-45659EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.

  22. 7.5CVE-2022-45658EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the schedEndTime parameter in the setSchedWifi function.

  23. 7.5CVE-2022-45657EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.

  24. 7.5CVE-2022-45656EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.

  25. 7.5CVE-2022-45655EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the form_fast_setting_wifi_set function.

  26. 7.5CVE-2022-45654EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the ssid parameter in the form_fast_setting_wifi_set function.

  27. 7.5CVE-2022-45653EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the page parameter in the fromNatStaticSetting function.

  28. 7.5CVE-2022-45652EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function.

  29. 7.5CVE-2022-45651EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the formSetVirtualSer function.

  30. 7.5CVE-2022-45650EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function.

  31. 7.5CVE-2022-45649EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function.

  32. 7.5CVE-2022-45648EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the devName parameter in the formSetDeviceName function.

  33. 7.5CVE-2022-45647EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeed parameter in the formSetClientState function.

  34. 7.5CVE-2022-45646EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeedUp parameter in the formSetClientState function.

  35. 7.5CVE-2022-45645EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function.

  36. 7.5CVE-2022-45644EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the formSetClientState function.

  37. 7.5CVE-2022-45643EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the addWifiMacFilter function.

  38. 7.5CVE-2022-45641EPSS 0.9%

    Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg.

  39. 6.5CVE-2022-4172EPSS 0.4%

    An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host b…

  40. 9.8CVE-2022-44283EPSS 1.2%

    AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.

  41. 6.5CVE-2022-39067EPSS 0.7%

    There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker could use the vulnerability to perform a denial of service attack.

  42. 9.8CVE-2022-44183EPSS 1.1%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.

  43. 9.8CVE-2022-44180EPSS 0.7%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.

  44. 9.8CVE-2022-44178EPSS 0.7%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.

  45. 9.8CVE-2022-44177EPSS 0.7%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.

  46. 9.8CVE-2022-44176EPSS 0.8%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.

  47. 9.8CVE-2022-44175EPSS 0.8%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.

  48. 9.8CVE-2022-44174EPSS 0.7%

    Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.

  49. 9.8CVE-2022-44172EPSS 0.7%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.

  50. 9.8CVE-2022-44171EPSS 0.7%

    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.