cve.bz

CWE-121: Stack-based Buffer Overflow, page 12

Filter

The product writes past the end of a buffer that was allocated on the stack.

What the weakness is: CWE-121 at MITRE

Ask an AI about CWE-121

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-121: Stack-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/121.html and https://cve.bz/cve/cwe/121?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.7CVE-2026-12935EPSS 1.0%

    The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an a…

  2. 9.2CVE-2026-67192EPSS 1.0%

    Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by sending malformed SSH packets when a GCM cipher is negotiated. Attackers can …

  3. 8.2CVE-2026-58181EPSS 0.7%

    The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. U…

  4. 8.2CVE-2026-58180EPSS 0.7%

    The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recomm…

  5. 9.2CVE-2026-58179EPSS 0.6%

    The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users …

  6. 8.2CVE-2026-58158EPSS 0.6%

    Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are …

  7. 8.2CVE-2026-33930EPSS 0.6%

    Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflows the stack when redirect following is enabled. This issue affects Apache T…

  8. 7.8CVE-2026-64539EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eir_create_adv_data() builds the advertising data into a fixed-size buffer ("size", 31 for the legacy pa…

  9. 7.1CVE-2026-43771EPSS 0.2%

    A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

  10. 5.3CVE-2026-12495EPSS 0.3%

    Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially cra…

  11. 7.0CVE-2026-64219EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async [Why&How] dc_process_dmub_aux_transfer_async() copies payload->length bytes…

  12. 3.8CVE-2026-55728EPSS 0.2%

    Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to trigger a SUID-…

  13. 8.8CVE-2026-16870EPSS 1.3%

    Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execut…

  14. 8.7CVE-2026-50039EPSS 0.5%

    The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request.

  15. 8.7CVE-2026-64831EPSS 0.9%

    FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bit…

  16. 7.2CVE-2026-61391EPSS 0.5%

    There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets.

  17. 8.8CVE-2026-16418EPSS 0.5%

    Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  18. 9.8CVE-2026-59144EPSS 0.6%

    Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq. The attach-time validator ring_validate_header checks the capacity-overflow and total_size consistency of …

  19. 6.5CVE-2026-16461EPSS 0.3%

    A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), version numbers from a remote RPCBPROC_DUMP reply are written into a fixed-size stack buffer without bounds checking. A …

  20. 7.3CVE-2026-15370EPSS 0.2%

    A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficient…

  21. 9.8CVE-2024-51315EPSS 0.5%

    The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName

  22. 9.8CVE-2024-51314EPSS 0.5%

    The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg.

  23. 9.8CVE-2024-51312EPSS 0.5%

    The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg.

  24. 9.8CVE-2024-51313EPSS 0.5%

    The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg.

  25. 9.8CVE-2024-51311EPSS 0.5%

    The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList.

  26. 7.8CVE-2026-48389EPSS 0.3%

    DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…

  27. 6.5CVE-2026-16277EPSS 0.5%

    A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checkin…

  28. 7.4CVE-2026-16248EPSS 0.9%

    A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in …

  29. 8.7CVE-2026-16097EPSS 0.8%

    A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Scheduler Name Handler. The manipulation of the argument a1 results in stack-based buffer overflow. It is possible to laun…

  30. 8.7CVE-2026-16096EPSS 0.5%

    A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file /proc/webmon_recent_domains. The manipulation leads to stack-based buffer overflow. It is possible to initiate t…

  31. 7.1CVE-2026-52584EPSS 0.1%

    Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function

  32. 8.1CVE-2021-27137KEVEPSS 4.0%

    An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploit…

  33. 7.5CVE-2026-56455EPSS 0.5%

    HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memo…

  34. 7.5CVE-2026-48863EPSS 0.8%

    A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed…

  35. 2.9CVE-2026-38752EPSS 0.2%

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

  36. 8.3CVE-2026-62349EPSS 0.5%

    TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString() checks space for only one byte before processing SQL string escape sequences \…

  37. 9.8CVE-2026-51807EPSS 0.7%

    Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4) caused by missing bounds validation before coding-pass lengths are written to j2k_codeblock::pass_len…

  38. 7.8CVE-2026-47971EPSS 0.3%

    Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…

  39. 7.5CVE-2026-50527EPSS 1.2%

    Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

  40. 7.5CVE-2026-47477EPSS 0.5%

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

  41. 5.7CVE-2026-62655EPSS 0.3%

    A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.

  42. 7.8CVE-2026-57091EPSS 0.3%

    Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.

  43. 8.8CVE-2026-56642EPSS 0.9%

    Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.

  44. 7.8CVE-2026-55141EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  45. 7.8CVE-2026-55134EPSS 0.6%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  46. 7.8CVE-2026-55055EPSS 0.6%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  47. 7.8CVE-2026-55038EPSS 0.6%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2026-50501EPSS 0.4%

    Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

  49. 7.8CVE-2026-50412EPSS 0.3%

    Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  50. 7.5CVE-2026-50411EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.