CWE-120 - Buffer overflow

Description

A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.
The simplest type of error, and the most common cause of buffer overflows, is the "classic" case in which the program copies the buffer without restricting how much is copied.
Buffer overflows can be used for bypassing security services, causing program crashes and arbitrary code execution. The weakness is introduced during Implementation stage.

Latest vulnerabilities for CWE-120

Multiple vulnerabilities in Google Android 2024-11-04
High Yes Zero Day

Multiple vulnerabilities in Qualcomm chipsets 2024-11-04
High Yes

Secure boot bypass in Renesas R-Car firmware 2024-10-21
Low Yes

Buffer overflow in Renesas R-Car firmware 2024-10-21
Low Yes

Multiple vulnerabilities in QRadar Incident Forensics 2024-10-18
High Yes

Multiple vulnerabilities in IBM QRadar SIEM 2024-10-18
High Yes

Multiple vulnerabilities in Qualcomm chipsets 2024-10-07
High Yes Zero Day

Multiple vulnerabilities in Google Android 2024-09-03
High Yes

Multiple vulnerabilities in Qualcomm chipsets 2024-09-02
High Yes

Buffer overflow in IBM Watson Discovery for IBM Cloud Pak for Data 2024-08-30
Medium Yes

References

Description of CWE-120 on Mitre website