Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-120 (未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)) — Vulnerability Class 1767

1767 vulnerabilities classified as CWE-120 (未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)). AI Chinese analysis included.

CWE-120 represents a critical memory safety vulnerability where software copies data into a fixed-size buffer without validating the input’s length against the destination’s capacity. This classic buffer overflow occurs when an attacker supplies input exceeding the allocated memory space, causing data to spill into adjacent memory regions. Exploitation typically involves injecting malicious code or altering program control flow, such as overwriting return addresses to execute arbitrary commands. Developers prevent this weakness by implementing rigorous bounds checking before any copy operation, ensuring the input size never exceeds the buffer’s limits. Utilizing safer, language-specific functions that automatically handle size verification, or adopting modern programming languages with built-in memory safety features, effectively mitigates this risk and preserves application integrity against memory corruption attacks.

MITRE CWE Description
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Common Consequences (2)
Integrity, Confidentiality, AvailabilityModify Memory, Execute Unauthorized Code or Commands
Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of the product's implicit security policy. This can often be used to subvert any other security service.
AvailabilityModify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU)
Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the product into an infinite loop.
Mitigations (5)
RequirementsUse a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow protection, but the protection can be disabled by the programmer. Be wary that a lan…
Architecture and DesignUse a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. Examples include the Safe C String Library (SafeStr) by Messier and Viega [REF-57], and the Strsafe.h library from Microsoft [REF-56]. These libraries provide safer versions of overflow-prone string-handling functions.
Operation, Build and CompilationUse automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
ImplementationConsider adhering to the following rules when allocating and managing an application's memory: Double check that your buffer is as large as you specify. When using functions that accept a number of bytes to copy, such as strncpy(), be aware that if the destination buffer size is equal to the source buffer size, it may not NULL-terminate the string. Check buffer boundaries if accessing the buffer i…
ImplementationAssume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all potentially relevant properties, including length, type of input, the full range…
Examples (2)
The following code asks the user to enter their last name and then attempts to store the value entered in the last_name array.
char last_name[20]; printf ("Enter your last name: "); scanf ("%s", last_name);
Bad · C
The following code attempts to create a local copy of a buffer to perform some manipulations to the data.
void manipulate_string(char * string){ char buf[24]; strcpy(buf, string); ... }
Bad · C
CVE IDTitleCVSSSeverityPublished
CVE-2023-33069 Buffer Copy Without Checking Size of Input in Audio — Snapdragon 6.7 Medium2024-02-06
CVE-2023-33068 Buffer Copy Without Checking Size of Input in Audio — Snapdragon 6.7 Medium2024-02-06
CVE-2023-45037 QTS, QuTS hero, QuTScloud — QTS 3.8 Low2024-02-02
CVE-2023-45036 QTS, QuTS hero, QuTScloud — QTS 3.8 Low2024-02-02
CVE-2023-45035 QTS, QuTS hero, QuTScloud — QTS 3.8 Low2024-02-02
CVE-2023-41292 QTS, QuTS hero, QuTScloud — QTS 3.8 Low2024-02-02
CVE-2023-41280 QTS, QuTS hero, QuTScloud — QTS 5.5 Medium2024-02-02
CVE-2023-41279 QTS, QuTS hero, QuTScloud — QTS 5.5 Medium2024-02-02
CVE-2023-41278 QTS, QuTS hero, QuTScloud — QTS 5.5 Medium2024-02-02
CVE-2023-41277 QTS, QuTS hero, QuTScloud — QTS 5.5 Medium2024-02-02
CVE-2023-41276 QTS, QuTS hero, QuTScloud — QTS 5.5 Medium2024-02-02
CVE-2023-41275 QTS, QuTS hero, QuTScloud — QTS 5.5 Medium2024-02-02
CVE-2024-22419 concat built-in can corrupt memory in vyper — vyper 7.3 High2024-01-18
CVE-2023-6334 HYPR 缓冲区错误漏洞 — Workforce Access 5.3 Medium2024-01-16
CVE-2023-52103 Huawei HarmonyOS 安全漏洞 — HarmonyOS 9.1AICriticalAI2024-01-16
CVE-2011-10005 EasyFTP MKD Command buffer overflow — EasyFTP 6.3 Medium2024-01-16
CVE-2023-40250 Hancom HCell 安全漏洞 — HCell 8.8 High2024-01-12
CVE-2023-7222 Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow — X2000R 7.2 High2024-01-09
CVE-2023-7221 Totolink T6 HTTP POST Request main buffer overflow — T6 9.8 Critical2024-01-09
CVE-2024-0213 Trellix Agent 安全漏洞 — Trellix Agent (TA) 8.2 High2024-01-09
CVE-2023-38583 GTKWave 安全漏洞 — GTKWave 7.8 High2024-01-08
CVE-2023-7208 Totolink X2000R_V2 boa formTmultiAP buffer overflow — X2000R_V2 8.0 High2024-01-07
CVE-2023-45044 QTS, QuTS hero — QuTS hero 3.8 Low2024-01-05
CVE-2023-45043 QTS, QuTS hero — QuTS hero 3.8 Low2024-01-05
CVE-2023-45042 QTS, QuTS hero — QuTS hero 3.8 Low2024-01-05
CVE-2023-45041 QTS, QuTS hero — QuTS hero 3.8 Low2024-01-05
CVE-2023-45040 QTS, QuTS hero — QTS 3.8 Low2024-01-05
CVE-2023-45039 QTS, QuTS hero — QTS 3.8 Low2024-01-05
CVE-2023-52309 Heap buffer overflow in paddle.repeat_interleave — PaddlePaddle 8.2 High2024-01-03
CVE-2023-52307 Stack overflow in paddle.linalg.lu_unpack — PaddlePaddle 8.2 High2024-01-03

Vulnerabilities classified as CWE-120 (未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)) represent 1767 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.