← Back
CWE-120

4,439 CVEs • Abstraction: Base • Likelihood of Exploit: High

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

JSON object

Loading...

CVEs (4,439)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Zephyrproject
1Zephyr
Jun 17, 2026
Sep 27, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.
1Zephyrproject
1Zephyr
Jun 17, 2026
Sep 27, 2023
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.
1Zephyrproject
1Zephyr
Jun 17, 2026
Sep 27, 2023
N/A· v4
10.0 CRITICAL· v3
N/A· v2
Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.
1Zephyrproject
1Zephyr
Jun 17, 2026
Sep 26, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.
1Maxiguvenlik
1General Device Manager
Jun 17, 2026
Sep 25, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Sep 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Sep 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Sep 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
1Qnap
1Multimedia Console
Jun 17, 2026
Sep 22, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We hav...Show more
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 ) and later Multimedia Console 1.4.7 ( 2023/03/20 ) and later Show less
1Qnap
1Qts
Jun 17, 2026
Sep 22, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have...Show more
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2441 build 20230621 and later QTS 4.3.3.2420 build 20230621 and later QTS 4.2.6 build 20230621 and later QTS 4.3.4.2451 build 20230621 and later Show less
1Jerryscript
1Jerryscript
Jun 17, 2026
Sep 20, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.
1Tenda
1Ac10 Firmware
Jun 17, 2026
Sep 18, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function.
1Opswat
1Metadefender Kiosk
Jun 17, 2026
Sep 15, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of communication).
1Cbm
1Control De Ciber
Jun 17, 2026
Sep 12, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the prin...Show more
Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by the request.Show less
1Xiongmaitech
2Nb080s09s Klc Firmware
Nbd80n32ra Kl V3 Firmware
Jun 17, 2026
Sep 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin allows a remote attacker t...Show more
Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin allows a remote attacker to casue a denial of service via a crafted request to the service.XM component.Show less
1Raidenftpd
1Raidenftpd
Jun 17, 2026
Sep 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard.
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Sep 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
1Dlink
1Dir 619l Firmware
Jun 17, 2026
Sep 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
1Mozilla
3Firefox
Firefox EsrThunderbird
Jun 17, 2026
Sep 11, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory on mac OS. *This bug only affects Firefox on macOS. Other o...Show more
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory on mac OS. *This bug only affects Firefox on macOS. Other operating systems are unaffected.* This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.Show less
1Hutool
1Hutool
Jun 17, 2026
Sep 8, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().