CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow), page 62

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

What the weakness is: CWE-120 at MITRE

1. 8.1CVE-2022-41894EPSS 0.6%2022-11-18

   TensorFlow is an open source platform for machine learning. The reference kernel of the `CONV_3D_TRANSPOSE` TensorFlow Lite operator wrongly increments the data_ptr when adding the bias to the result. Instead of `data_ptr += num_channels;`…

2. 9.8CVE-2022-44204EPSS 1.3%2022-11-18

   D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.

3. 5.5CVE-2021-33897EPSS 0.2%2022-11-17

   A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service (application crash) via a crafted MIDI file with malformed bytes. This file is mishandled during …

4. 6.5CVE-2022-20927EPSS 0.5%2022-11-15

   A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an af…

5. 7.8CVE-2022-25724EPSS 0.1%2022-11-15

   Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…

6. 7.5CVE-2022-0324EPSS 1.3%2022-11-14

   There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to cras…

7. 9.1CVE-2021-34566EPSS 1.2%2022-11-09

   In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to crash the iocheck process and write memory resulting in loss of integrity and DoS.

8. 9.8CVE-2022-34823EPSS 1.4%2022-11-08

   Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earli…

9. 7.8CVE-2022-39377EPSS 1.3%2022-11-08

   sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures functi…

10. 7.5CVE-2022-43343EPSS 1.2%2022-11-08

    N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.

11. 7.8CVE-2022-39343EPSS 0.9%2022-11-08

    Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achie…

12. 7.8CVE-2022-40284EPSS 0.4%2022-11-06

    A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit t…

13. 9.8CVE-2022-39344EPSS 2.7%2022-11-04

    Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. Prior to version 6.1.12, the USB DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting…

14. 7.8CVE-2021-34055EPSS 0.5%2022-11-04

    jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.

15. 9.8CVE-2022-32941EPSS 2.0%2022-11-01

    The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow may result in arbitrary code…

16. 7.5CVE-2022-3786EPSS 92%2022-11-01

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certifi…

17. 7.8CVE-2022-43752EPSS 0.3%2022-10-31

    Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the t…

18. 9.8CVE-2021-40241EPSS 1.2%2022-10-31

    xfig 3.2.7 is vulnerable to Buffer Overflow.

19. 7.5CVE-2022-43365EPSS 0.9%2022-10-27

    IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

20. 7.5CVE-2022-23462EPSS 0.7%2022-10-21

    IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service (DOS) when it parses scientific notation numbers present in JSO…

21. 9.8CVE-2021-42553EPSS 1.3%2022-10-21

    A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS. The library is typica…

22. 7.8CVE-2022-33217EPSS 0.1%2022-10-19

    Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile

23. 9.8CVE-2022-25687EPSS 0.4%2022-10-19

    memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Sna…

24. 8.8CVE-2022-3550EPSS 2.0%2022-10-17

    A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix …

25. 5.5CVE-2022-39122EPSS 0.1%2022-10-14

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

26. 5.5CVE-2022-39121EPSS 0.1%2022-10-14

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

27. 5.5CVE-2022-39120EPSS 0.1%2022-10-14

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

28. 7.5CVE-2022-41485EPSS 1.0%2022-10-13

    Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

29. 7.5CVE-2022-41484EPSS 0.9%2022-10-13

    Tenda AC1900 AP500(US)_V1_180320(Beta) was discovered to contain a buffer overflow in the 0x32384 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

30. 7.5CVE-2022-41483EPSS 1.0%2022-10-13

    Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x4a12cc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

31. 7.5CVE-2022-41482EPSS 0.9%2022-10-13

    Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47c5dc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

32. 7.5CVE-2022-41481EPSS 1.0%2022-10-13

    Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47de1c function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

33. 7.5CVE-2022-41480EPSS 0.9%2022-10-13

    Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x475dc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

34. 7.8CVE-2022-32491EPSS 0.2%2022-10-12

    Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM.

35. 9.8CVE-2022-36361EPSS 1.1%2022-10-11

    A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versi…

36. 9.8CVE-2022-37891EPSS 1.4%2022-10-07

    Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba In…

37. 9.8CVE-2022-37890EPSS 1.4%2022-10-07

    Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba In…

38. 9.8CVE-2022-37889EPSS 2.1%2022-10-07

    There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (…

39. 9.8CVE-2022-37887EPSS 2.1%2022-10-07

    There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (…

40. 9.8CVE-2022-37886EPSS 1.9%2022-10-07

    There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (…

41. 9.8CVE-2022-37885EPSS 1.9%2022-10-07

    There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (…

42. 9.8CVE-2022-39274EPSS 2.0%2022-10-06

    LoRaMac-node is a reference implementation and documentation of a LoRa network node. Versions of LoRaMac-node prior to 4.7.0 are vulnerable to a buffer overflow. Improper size validation of the incoming radio frames can lead to an 65280-by…

43. 9.8CVE-2022-39244EPSS 1.5%2022-10-06

    PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP parser, PJMEDIA RTP decoder, and PJMEDIA SDP parser are affeced by a buffer overflow vulnerability. Users connectin…

44. 9.8CVE-2022-37888EPSS 2.1%2022-10-06

    There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (…

45. 6.5CVE-2022-20945EPSS 0.5%2022-09-30

    A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnera…

46. 9.8CVE-2022-28722EPSS 1.3%2022-09-26

    Certain HP Print Products are potentially vulnerable to Buffer Overflow.

47. 9.8CVE-2022-38573EPSS 1.8%2022-09-23

    10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function.

48. 6.5CVE-2022-35021EPSS 0.9%2022-09-22

    OTFCC commit 617837b was discovered to contain a global buffer overflow via /release-x64/otfccdump+0x718693.

49. 9.8CVE-2022-32788EPSS 2.9%2022-09-20

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution.

50. 8.2CVE-2022-40261EPSS 0.4%2022-09-20

    An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running …