CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Description
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-120 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-pr85-w493-9w3x | CVE-2026-55209 | CRITICAL |
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read |
2026-08-18 | |
| GHSA-q6m5-f73j-m9mc | CVE-2026-54257 | CRITICAL |
Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow |
2026-07-20 | |
| GHSA-p594-7xw4-g76p | CVE-2022-41793 | HIGH |
Open Babel has out-of-bounds write in CSR PadString (title field) |
2026-07-01 | |
| GHSA-jmf7-79p7-qchq | - | CRITICAL |
Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field) |
2026-07-01 | |
| GHSA-9g3x-6x24-vf9f | CVE-2025-26240 | HIGH |
pdfkit: Path traversal in from_string |
2026-06-18 | |
| GHSA-g857-hhfv-j68w | CVE-2026-27820 | MODERATE |
Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption |
2026-06-10 | |
| GHSA-hh39-vjv8-j337 | CVE-2024-34252 | CRITICAL |
pywasm3 contains a global buffer overflow which leads to segmentation fault |
2026-06-09 | |
| GHSA-hc3c-63hc-2r9f | - | HIGH | - |
libcrux: Potential Panic on Overlong Ciphertext Buffer |
2026-05-19 |
| GHSA-vh63-9mqx-wmjr | CVE-2025-64182 | MODERATE |
OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel() |
2026-04-06 | |
| GHSA-5pwr-322w-8jr4 | CVE-2026-27459 | HIGH |
pyOpenSSL DTLS cookie callback buffer overflow |
2026-03-19 | |
| GHSA-fj3w-jwp8-x2g3 | CVE-2026-27942 | LOW |
fast-xml-parser has stack overflow in XMLBuilder with preserveOrder |
2026-03-06 | |
| GHSA-23f4-hfmq-94mj | CVE-2026-24807 | MODERATE |
Quick-Media Batik Codec FIX Package has Buffer Overflow Vulnerability in PNG Codec |
2026-01-28 | |
| GHSA-gpcv-p28p-fv2p | CVE-2023-3766 | MODERATE | - |
odoh-rs's Invalid Slice Split Results in Server Panic |
2025-12-22 |
| GHSA-2mj3-6grc-px38 | CVE-2025-68383 | MODERATE |
Filebeat Beats has Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in Dissect Configuration |
2025-12-19 | |
| GHSA-8rwr-x37p-mx23 | CVE-2022-3602 | CRITICAL | - |
X.509 Email Address 4-byte Buffer Overflow |
2025-11-04 |
| GHSA-v5h6-c2hv-hv3r | CVE-2024-27280 | CRITICAL |
StringIO buffer overread vulnerability |
2025-11-04 | |
| GHSA-c8g6-qrwh-m3vp | CVE-2025-54469 | CRITICAL |
NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow |
2025-10-30 | |
| GHSA-wwxp-hxh6-8gf8 | - | HIGH | - |
binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref |
2025-10-22 |
| GHSA-44wm-f244-xhp3 | CVE-2024-28219 | HIGH |
Pillow buffer overflow vulnerability |
2025-10-15 | |
| GHSA-5m5w-w2h2-fqgq | CVE-2025-57275 | MODERATE |
SPDK is vulnerable to buffer overflow in the NVMe-oF target component |
2025-10-01 | |
| GHSA-5gmm-6m36-r7jh | CVE-2023-53156 | MODERATE | - |
transpose: Buffer overflow due to integer overflow |
2025-07-28 |
| GHSA-3gc7-fjrx-p6mg | CVE-2025-3194 | HIGH |
bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function |
2025-04-04 | |
| GHSA-9p8r-4xp4-gw5w | CVE-2024-26149 | LOW |
Vyper's `_abi_decode` vulnerable to Memory Overflow |
2025-01-17 | |
| GHSA-375g-39jq-vq7m | CVE-2024-26134 | HIGH |
Potential buffer overflow in CBOR2 decoder |
2025-01-14 | |
| GHSA-rr66-qh5m-w6mx | CVE-2023-42278 | HIGH |
hutool Buffer Overflow vulnerability |
2025-01-03 |