Memory corruption in WLAN while running doDriverCmd for an unspecific command.
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an att
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Over
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Route
Memory corruption while processing audio effects.
A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loca
A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with
A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local at
A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local
A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may al
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local a
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker wi
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker wit
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker wi
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker w
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacke
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker
Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC ve
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user cou
Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destinati
In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation
In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalati
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption while sending SMS from AP firmware.
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user conne
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, w
A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which
A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macO
A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in
A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series fir
Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.
Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a
Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remot
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Libr
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial
Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via t
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause
tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2
Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via pac
Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.
Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c
Frequently Asked Questions
What is CWE-120?
CWE-120 (CWE-120) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-120?
There are 5,353 CVE records associated with CWE-120 in our database. Of these, 900 are critical severity, 2344 are high severity, and 947 are medium severity.
How can I protect against CWE-120 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-120 using AI-powered security agents.
Detect CWE-120 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-120 vulnerabilities across your infrastructure.
Get Started