cve.bz

CWE-121: Stack-based Buffer Overflow, page 13

Filter

The product writes past the end of a buffer that was allocated on the stack.

What the weakness is: CWE-121 at MITRE

Ask an AI about CWE-121

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-121: Stack-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/121.html and https://cve.bz/cve/cwe/121?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-50400EPSS 0.3%

    Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2026-50387EPSS 0.3%

    Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

  3. 7.5CVE-2026-50368EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  4. 7.5CVE-2026-50355EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  5. 7.5CVE-2026-50304EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  6. 7.4CVE-2026-4017EPSS 0.1%

    Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.

  7. 7.8CVE-2026-55899EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  8. 7.5CVE-2026-54983EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  9. 7.5CVE-2026-50695EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  10. 7.8CVE-2026-50318EPSS 0.3%

    Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-49789EPSS 0.4%

    Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  12. 8.9CVE-2026-15701EPSS 1.1%

    A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based b…

  13. 6.6CVE-2026-59837EPSS 0.7%

    A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all ve…

  14. 7.5CVE-2026-51105EPSS 0.4%

    Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OP_SERVERMESSAGE Handler.

  15. 7.4CVE-2026-15696EPSS 0.9%

    A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can b…

  16. 7.4CVE-2026-15695EPSS 0.9%

    A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be i…

  17. 7.4CVE-2026-15694EPSS 0.9%

    A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the at…

  18. 7.4CVE-2026-15693EPSS 0.9%

    A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It i…

  19. 7.4CVE-2026-15692EPSS 0.9%

    A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflo…

  20. 7.4CVE-2026-15691EPSS 0.9%

    A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. …

  21. 5.1CVE-2026-40553EPSS 0.3%

    Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirm…

  22. 7.4CVE-2026-15548EPSS 0.8%

    A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub_407220 of the file /usr/sbin/httpd of the component DNS List Rendering. The manipulation leads to stack-based buffer o…

  23. 7.4CVE-2026-15544EPSS 0.8%

    A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overflow…

  24. 9.8CVE-2026-10666EPSS 0.7%

    parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN + 1]) using a length of str_len - end …

  25. 7.4CVE-2026-15480EPSS 0.8%

    A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflo…

  26. 7.5CVE-2026-55687EPSS 0.7%

    ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpeg_parse_dqt_marker() in components/esp_driver_jpeg/jpeg_parse_marker.c be…

  27. 5.7CVE-2026-31267EPSS 0.3%

    Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the administrative web interface. A stack buffer overflow vulnerability in the administrative web interface allows an authenticated attacker with adminis…

  28. 7.5CVE-2026-51605EPSS 0.5%

    A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.991) allows an unauthenticated remote attacker to cause a denial of service via a crafted TEARDOWN request.

  29. 7.5CVE-2026-51604EPSS 0.5%

    A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a crafted PLAY request.

  30. 7.5CVE-2026-51603EPSS 0.5%

    A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a crafted second SETUP request. After completing the OPTIONS…

  31. 7.5CVE-2026-51602EPSS 0.5%

    A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a crafted SETUP request. The RTSP service's second-stage URL…

  32. 7.5CVE-2026-51601EPSS 0.6%

    Tenda CP3 V3.0 firmware V31.1.9.91 contains a stack-based buffer overflow in the RTSP service. The device fails to validate the length of the clock= value in the Range header field when processing a PLAY request. An unauthenticated remote …

  33. 6.9CVE-2026-60095EPSS 0.7%

    Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlink_server service that allows unauthenticated remote attackers to overwrite the saved return address…

  34. 7.5CVE-2026-59692EPSS 0.6%

    A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unau…

  35. 6.1CVE-2026-58303EPSS 0.2%

    Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before b30b63fc63b403907d8137da1c65aaa4521fe74e.

  36. 5.5CVE-2026-15167EPSS 0.3%

    DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

  37. 5.5CVE-2026-15166EPSS 0.1%

    IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

  38. 8.4CVE-2026-49033EPSS 0.2%

    The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.

  39. 8.8CVE-2026-25268EPSS 0.1%

    Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

  40. 3.3CVE-2026-41434EPSS 0.2%

    OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursio…

  41. 1.9CVE-2026-14789EPSS 0.2%

    A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of the file libr/bin/format/mdmp/mdmp.c of the component Memory64ListStream Parser. Performing a manipulation results in st…

  42. 7.4CVE-2026-14721EPSS 0.8%

    A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web Endpoint. The manipulation of the argument ssid leads to stack-ba…

  43. 7.1CVE-2026-14606EPSS 0.2%

    A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/SWM341.h of the component SWM341 CAN Handler. Performing a …

  44. 7.1CVE-2026-14605EPSS 0.2%

    A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the component ls1c CAN Handler. Such manipulation leads to stack-ba…

  45. 7.5CVE-2026-52190EPSS 0.5%

    Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_448384 component

  46. 7.6CVE-2026-6687EPSS 0.3%

    FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. This maps to CWE-121 (Stack-based Buffer Overflow). Estimated CVSS v3.1 vector: CV…

  47. 6.3CVE-2026-54502EPSS 0.4%

    Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer overflow when a large :indent value is provided by the developer. fill_indent in …

  48. 6.5CVE-2026-43718EPSS 0.4%

    A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may l…

  49. 6.8CVE-2026-9105EPSS 1.1%

    An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stac…

  50. 1.9CVE-2026-13573EPSS 0.2%

    A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based bu…