CWE-120
4,202 CVEs • Abstraction: Base • Likelihood of Exploit: High
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
CVEs (4,202)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Siemens 3Sicam Mmu Firmware Sicam Sgu FirmwareSicam T FirmwareJun 17, 2026 Jul 14, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer overflow in various positions of the web application might enable an attacker wi...Show more |
1Geovision 6Gv As1010 Firmware Gv As210 FirmwareGv As410 Firmware+3 moreJun 17, 2026 Jul 8, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command. |
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a buffer overflow vulnerability, which may...Show more |
1Wavlink 1Wl Wn530hg4 Firmware Jun 17, 2026 Jul 1, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. (The set of affected scrip...Show more |
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbit...Show more |
1Activision 1Call Of Duty Modern Warfare 2 Jun 17, 2026 Jun 30, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty...Show more |
1Sophos 1Xg Firewall Firmware Jun 17, 2026 Jun 29, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x. |
Adobe Character Animator versions 3.2 and earlier have a buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution. |
3Canonical FedoraprojectPython3Fedora PillowUbuntu LinuxJun 17, 2026 Jun 25, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. |
2Doom Vanille Project Idsoftware2Doom Vanille Tech 1Jun 17, 2026 Jun 24, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in...Show more |
In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4. |
2Chocolate Doom Opensuse4Backports Chocolate DoomCrispy Doom+1 moreJun 17, 2026 Jun 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack. |
1Qualcomm 33Apq8009 Firmware Apq8017 FirmwareApq8053 Firmware+30 moreJun 17, 2026 Jun 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra...Show more |
1Qualcomm 44Apq8009 Firmware Apq8017 FirmwareApq8053 Firmware+41 moreJun 17, 2026 Jun 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd...Show more |
1Qualcomm 55Apq8009 Firmware Apq8017 FirmwareApq8053 Firmware+52 moreJun 17, 2026 Jun 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...Show more |
1Qualcomm 32Apq8009 Firmware Apq8098 FirmwareKamorta Firmware+29 moreJun 17, 2026 Jun 22, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...Show more |
1Qualcomm 57Apq8009 Firmware Apq8017 FirmwareApq8053 Firmware+54 moreJun 17, 2026 Jun 22, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...Show more |
5Canonical DebianLibvnc Project+2 more10Debian Linux LeapLibvncserver+7 moreJun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename. |
1Tp Link 7Nc200 Firmware Nc210 FirmwareNc220 Firmware+4 moreJun 17, 2026 Jun 17, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401,...Show more |
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long value in an SDP Offer packet. |