← Back
CWE-120

4,227 CVEs • Abstraction: Base • Likelihood of Exploit: High

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

JSON object

Loading...

CVEs (4,227)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Espressif
1Esp Idf
Jun 17, 2026
Oct 17, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component.
1Tp Link
1Tl Wdr7660 Firmware
Jun 17, 2026
Oct 15, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In TP-Link TL-WDR7660 v1.0, the guestRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.
1Tp Link
1Tl Wdr7660 Firmware
Jun 17, 2026
Oct 15, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In TP-Link TL-WDR7660 1.0, the wacWhitelistJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.
1Tp Link
1Tl Wdr7660 Firmware
Jun 17, 2026
Oct 15, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In TP-Link TL-WDR7660 1.0, the rtRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.
1Tp Link
1Tl Wdr7660 Firmware
Jun 17, 2026
Oct 15, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities.
1Oracle
1Weblogic Server
Jun 17, 2026
Oct 15, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthen...Show more
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).Show less
1Dlink
1Dir 820l Firmware
Jun 17, 2026
Oct 14, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ. The manipulation of the argument curTime le...Show more
A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime lea...Show more
A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument curTime leads to buffer...Show more
A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the function formSetQoS of the file /goform/formSetQoS. The manipulation of the argument curTime leads to...Show more
A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the function formSetQoS of the file /goform/formSetQoS. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was found in D-Link DIR-619L B1 2.06. It has been classified as critical. This affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffe...Show more
A vulnerability was found in D-Link DIR-619L B1 2.06. It has been classified as critical. This affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument curTime leads...Show more
A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is the function formSetMuti of the file /goform/formSetMuti. The manipulation of the argument curTime l...Show more
A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is the function formSetMuti of the file /goform/formSetMuti. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 13, 2024
5.1 MEDIUM· v4
8.8 HIGH· v3
5.2 MEDIUM· v2
A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument curTime leads to b...Show more
A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument curTime leads to buffer overflow. The exploit has been disclosed to the public and may be used.Show less
1Samsung
18Exynos 1080 Firmware
Exynos 1280 FirmwareExynos 1330 Firmware+15 more
Jun 17, 2026
Oct 11, 2024
N/A· v4
6.2 MEDIUM· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, and Modem 5...Show more
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, and Modem 5300. A USAT out-of-bounds write due to a heap buffer overflow can lead to a Denial of Service.Show less
1Apple
2Apple Tv
Itunes
Jun 17, 2026
Oct 11, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected...Show more
A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.Show less
-
-
Jun 17, 2026
Oct 11, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, l...Show more
A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.Show less
-
-
Jun 17, 2026
Oct 11, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A vulnerability was discovered in DI_8200-16.07.26A1, There is a buffer overflow in the dbsrv_asp function; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Oct 10, 2024
8.7 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. Affected by this issue is the function formSetLog of the file /goform/formSetLog. The manipulation of the argument curTime lea...Show more
A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. Affected by this issue is the function formSetLog of the file /goform/formSetLog. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less