Common Weakness Enumeration

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Description

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-120 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-pr85-w493-9w3x CVE-2026-55209 CRITICAL

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

2026-08-18
GHSA-q6m5-f73j-m9mc CVE-2026-54257 CRITICAL

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

2026-07-20
GHSA-p594-7xw4-g76p CVE-2022-41793 HIGH

Open Babel has out-of-bounds write in CSR PadString (title field)

2026-07-01
GHSA-jmf7-79p7-qchq - CRITICAL

Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)

2026-07-01
GHSA-9g3x-6x24-vf9f CVE-2025-26240 HIGH

pdfkit: Path traversal in from_string

2026-06-18
GHSA-g857-hhfv-j68w CVE-2026-27820 MODERATE

Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

2026-06-10
GHSA-hh39-vjv8-j337 CVE-2024-34252 CRITICAL

pywasm3 contains a global buffer overflow which leads to segmentation fault

2026-06-09
GHSA-hc3c-63hc-2r9f - HIGH -

libcrux: Potential Panic on Overlong Ciphertext Buffer

2026-05-19
GHSA-vh63-9mqx-wmjr CVE-2025-64182 MODERATE

OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()

2026-04-06
GHSA-5pwr-322w-8jr4 CVE-2026-27459 HIGH

pyOpenSSL DTLS cookie callback buffer overflow

2026-03-19
GHSA-fj3w-jwp8-x2g3 CVE-2026-27942 LOW

fast-xml-parser has stack overflow in XMLBuilder with preserveOrder

2026-03-06
GHSA-23f4-hfmq-94mj CVE-2026-24807 MODERATE

Quick-Media Batik Codec FIX Package has Buffer Overflow Vulnerability in PNG Codec

2026-01-28
GHSA-gpcv-p28p-fv2p CVE-2023-3766 MODERATE -

odoh-rs's Invalid Slice Split Results in Server Panic

2025-12-22
GHSA-2mj3-6grc-px38 CVE-2025-68383 MODERATE

Filebeat Beats has Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in Dissect Configuration

2025-12-19
GHSA-8rwr-x37p-mx23 CVE-2022-3602 CRITICAL -

X.509 Email Address 4-byte Buffer Overflow

2025-11-04
GHSA-v5h6-c2hv-hv3r CVE-2024-27280 CRITICAL

StringIO buffer overread vulnerability

2025-11-04
GHSA-c8g6-qrwh-m3vp CVE-2025-54469 CRITICAL

NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow

2025-10-30
GHSA-wwxp-hxh6-8gf8 - HIGH -

binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref

2025-10-22
GHSA-44wm-f244-xhp3 CVE-2024-28219 HIGH

Pillow buffer overflow vulnerability

2025-10-15
GHSA-5m5w-w2h2-fqgq CVE-2025-57275 MODERATE

SPDK is vulnerable to buffer overflow in the NVMe-oF target component

2025-10-01
GHSA-5gmm-6m36-r7jh CVE-2023-53156 MODERATE -

transpose: Buffer overflow due to integer overflow

2025-07-28
GHSA-3gc7-fjrx-p6mg CVE-2025-3194 HIGH

bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function

2025-04-04
GHSA-9p8r-4xp4-gw5w CVE-2024-26149 LOW

Vyper's `_abi_decode` vulnerable to Memory Overflow

2025-01-17
GHSA-375g-39jq-vq7m CVE-2024-26134 HIGH

Potential buffer overflow in CBOR2 decoder

2025-01-14
GHSA-rr66-qh5m-w6mx CVE-2023-42278 HIGH

hutool Buffer Overflow vulnerability

2025-01-03