CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Description
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-10 · CAPEC-100 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-67 · CAPEC-8 · CAPEC-9 · CAPEC-92
CVEs mapped to this weakness (4,372)
page 156 of 219| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-43526 | Med | 0.44 | 6.7 | 0.00 | May 6, 2024 | Memory corruption while querying module parameters from Listen Sound model client in kernel from user space. | ||
| CVE-2023-43525 | Med | 0.44 | 6.7 | 0.00 | May 6, 2024 | Memory corruption while copying the sound model data from user to kernel buffer during sound model register. | ||
| CVE-2023-43524 | Med | 0.44 | 6.7 | 0.00 | May 6, 2024 | Memory corruption when the bandpass filter order received from AHAL is not within the expected range. | ||
| CVE-2023-52614 | Hig | 0.44 | 7.8 | 0.00 | Mar 18, 2024 | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflow in trans_stat_show(). Convert simple snprintf to the more secure scnprintf with size of PAGE_SIZE. Add condition checking if we are… | ||
| CVE-2024-25817 | Hig | 0.44 | 7.8 | 0.00 | Mar 6, 2024 | Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components. | ||
| CVE-2023-33077 | Med | 0.44 | 6.7 | 0.00 | Feb 6, 2024 | Memory corruption in HLOS while converting from authorization token to HIDL vector. | ||
| CVE-2023-33069 | Med | 0.44 | 6.7 | 0.00 | Feb 6, 2024 | Memory corruption in Audio while processing the calibration data returned from ACDB loader. | ||
| CVE-2023-33068 | Med | 0.44 | 6.7 | 0.00 | Feb 6, 2024 | Memory corruption in Audio while processing IIR config data from AFE calibration block. | ||
| CVE-2011-10005 | Med | 0.44 | 6.3 | 0.04 | Jan 16, 2024 | A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the… | ||
| CVE-2023-33024 | Med | 0.44 | 6.7 | 0.00 | Dec 5, 2023 | Memory corruption while sending SMS from AP firmware. | ||
| CVE-2023-28580 | Med | 0.44 | 6.7 | 0.00 | Dec 5, 2023 | Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. | ||
| CVE-2023-28579 | Med | 0.44 | 6.7 | 0.00 | Dec 5, 2023 | Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length. | ||
| CVE-2023-32860 | Med | 0.44 | 6.7 | 0.00 | Dec 4, 2023 | In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929788; Issue ID: ALPS07929788. | ||
| CVE-2023-32859 | Med | 0.44 | 6.7 | 0.00 | Dec 4, 2023 | In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08000473; Issue ID: ALPS08000473. | ||
| CVE-2023-49700 | Med | 0.44 | 6.7 | 0.00 | Nov 30, 2023 | Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large. | ||
| CVE-2023-6238 | Med | 0.44 | 6.7 | 0.00 | Nov 21, 2023 | A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing… | ||
| CVE-2023-29177 | Med | 0.44 | 6.7 | 0.00 | Nov 14, 2023 | Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically… | ||
| CVE-2023-43581 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43580 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43579 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. |
- risk 0.44cvss 6.7epss 0.00
Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.
- risk 0.44cvss 6.7epss 0.00
Memory corruption while copying the sound model data from user to kernel buffer during sound model register.
- risk 0.44cvss 6.7epss 0.00
Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
- risk 0.44cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflow in trans_stat_show(). Convert simple snprintf to the more secure scnprintf with size of PAGE_SIZE. Add condition checking if we are…
- risk 0.44cvss 7.8epss 0.00
Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in HLOS while converting from authorization token to HIDL vector.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while processing IIR config data from AFE calibration block.
- risk 0.44cvss 6.3epss 0.04
A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the…
- risk 0.44cvss 6.7epss 0.00
Memory corruption while sending SMS from AP firmware.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.
- risk 0.44cvss 6.7epss 0.00
In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929788; Issue ID: ALPS07929788.
- risk 0.44cvss 6.7epss 0.00
In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08000473; Issue ID: ALPS08000473.
- risk 0.44cvss 6.7epss 0.00
Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing…
- risk 0.44cvss 6.7epss 0.00
Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically…
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.