CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Description

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Diagram

Diagram illustrating CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Source: MITRE CWE™ — CWE-120

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') — CVE Insight