← Back
CWE-120

4,443 CVEs • Abstraction: Base • Likelihood of Exploit: High

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

JSON object

Loading...

CVEs (4,443)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Shieldstore Project
1Shieldstore
Jul 9, 2026
May 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore commit 58d455617f99705f0ffd8a27616abdf77bdc1bdc allows attackers to cause an information leak via a cra...Show more
A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore commit 58d455617f99705f0ffd8a27616abdf77bdc1bdc allows attackers to cause an information leak via a crafted structure from an untrusted operating system.Show less
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
1Google
1Android
Jun 17, 2026
May 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service with no additional execution privileges.
1Apple
1Macos
Jun 17, 2026
May 8, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
1Apple
1Macos
Jun 17, 2026
May 8, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
May 8, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may...Show more
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.Show less
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
May 8, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files.
1Apple
1Macos
Jun 17, 2026
May 8, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or arbitrary code...Show more
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or arbitrary code execution.Show less
1Apple
1Macos
Jun 17, 2026
May 8, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
May 8, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.6, tvOS 16.4, watchOS 9....Show more
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.6, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.Show less
1Apple
2Ipados
Iphone Os
Jun 17, 2026
May 8, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. A user in a privileged network position may be able to cause a denial-of-service.
1Hp
2Arubaos
Instantos
Jun 17, 2026
May 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen...Show more
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.Show less
1Hp
2Arubaos
Instantos
Jun 17, 2026
May 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen...Show more
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.Show less
1Hp
2Arubaos
Instantos
Jun 17, 2026
May 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen...Show more
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.Show less