cve.bz

CWE-121: Stack-based Buffer Overflow, page 10

Filter

The product writes past the end of a buffer that was allocated on the stack.

What the weakness is: CWE-121 at MITRE

Ask an AI about CWE-121

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-121: Stack-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/121.html and https://cve.bz/cve/cwe/121?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-49420EPSS 0.4%

    The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traff…

  2. 10.0CVE-2026-76008EPSS 1.0%

    A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer…

  3. 8.6CVE-2026-76004EPSS 0.8%

    A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the…

  4. 8.6CVE-2026-76003EPSS 0.8%

    A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The att…

  5. 8.6CVE-2026-75976EPSS 0.9%

    A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. T…

  6. 8.6CVE-2026-75877EPSS 0.9%

    A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN_00432574/FUN_0043372C of the component alphapd. E…

  7. 9.3CVE-2026-75784EPSS 1.1%

    A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in s…

  8. 8.6CVE-2026-75783EPSS 0.6%

    A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based b…

  9. 9.8CVE-2026-67967EPSS 0.6%

    Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819

  10. 7.8CVE-2026-54758EPSS 0.2%

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $( and ) into the fixed-si…

  11. 8.7CVE-2026-73522EPSS 4.0%

    COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CA…

  12. 8.7CVE-2026-71979EPSS 0.6%

    INDI (Instrument Neutral Distributed Interface) indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to crash the daemon by sending malformed XML w…

  13. 9.3CVE-2026-74843EPSS 1.0%

    A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export_pingortrace.cgi of the component Export Pingortrace CGI. Executing a …

  14. 8.6CVE-2026-19959EPSS 0.8%

    A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitat…

  15. 2.1CVE-2026-19933EPSS 0.4%

    A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may…

  16. 7.4CVE-2026-19847EPSS 0.9%

    A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based b…

  17. 7.4CVE-2026-19846EPSS 0.9%

    A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based b…

  18. 7.4CVE-2026-19845EPSS 0.9%

    A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to s…

  19. 7.4CVE-2026-19844EPSS 0.9%

    A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename re…

  20. 7.4CVE-2026-19824EPSS 0.9%

    A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a manipulation of the argument IPMacBindRule can lead to stac…

  21. 7.4CVE-2026-19823EPSS 0.9%

    A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex re…

  22. 7.4CVE-2026-19822EPSS 0.9%

    A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to sta…

  23. 7.4CVE-2026-19815EPSS 0.9%

    A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyw…

  24. 7.4CVE-2026-19814EPSS 0.9%

    A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performing a manipulation of the argument macAddress results in stack-…

  25. 7.4CVE-2026-19813EPSS 0.9%

    A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads…

  26. 7.4CVE-2026-19812EPSS 0.9%

    A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based b…

  27. 7.4CVE-2026-19811EPSS 0.9%

    A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment result…

  28. 7.4CVE-2026-19791EPSS 0.9%

    A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRoute…

  29. 7.4CVE-2026-19790EPSS 0.9%

    A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPo…

  30. 7.4CVE-2026-19789EPSS 0.9%

    A vulnerability was determined in Tenda AC1206 15.03.06.23_multi_TD01. This vulnerability affects the function set_wl_guest_iplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the a…

  31. 7.4CVE-2026-19788EPSS 0.9%

    A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName resu…

  32. 8.2CVE-2026-14679EPSS 0.3%

    Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, an…

  33. 5.5CVE-2026-19695EPSS 0.1%

    Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

  34. 8.4CVE-2026-19003EPSS 0.2%

    A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculat…

  35. 9.8CVE-2026-10534EPSS 0.4%

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

  36. 8.8CVE-2026-13361EPSS 0.5%

    IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.

  37. 8.1CVE-2026-71407EPSS 0.5%

    A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context…

  38. 2.1CVE-2024-14042EPSS 0.5%

    A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argume…

  39. 7.8CVE-2026-70346EPSS 0.3%

    Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-70344EPSS 0.3%

    Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-68817EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  42. 7.8CVE-2026-68816EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  43. 7.8CVE-2026-68795EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  44. 7.8CVE-2026-66807EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  45. 7.8CVE-2026-64919EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  46. 7.8CVE-2026-64912EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  47. 7.8CVE-2026-64907EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2026-63527EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  49. 7.8CVE-2026-63526EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  50. 9.8CVE-2026-62878EPSS 1.0%

    Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.