CWE-121: Stack-based Buffer Overflow, page 3
Filter
The product writes past the end of a buffer that was allocated on the stack.
What the weakness is: CWE-121 at MITRE
Ask an AI about CWE-121
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-121: Stack-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/121.html and https://cve.bz/cve/cwe/121?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.3CVE-2026-79838EPSS 0.09%
A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.
- 7.6CVE-2026-79832EPSS 0.2%
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.
- 6.6CVE-2026-79830EPSS 0.1%
A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.
- 4.0CVE-2026-79823EPSS 0.10%
HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
- 2.3CVE-2025-29897EPSS 0.3%
A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already …
- 7.5CVE-2026-76663EPSS 0.3%
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
- 5.9CVE-2026-76662EPSS 0.2%
A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
- 7.5CVE-2026-73799EPSS 0.3%
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption
- 9.3CVE-2026-101983EPSS 0.5%
A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain c…
- 9.3CVE-2026-101982EPSS 0.6%
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evol…
- 8.7CVE-2026-101981EPSS 0.2%
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed …
- 8.7CVE-2026-101979EPSS 0.4%
A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP p…
- 8.7CVE-2026-33798EPSS 0.4%
A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic.
- 9.3CVE-2026-33796EPSS 0.6%
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route m…
- 9.3CVE-2026-33792EPSS 0.6%
A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a…
- 9.2CVE-2026-33789EPSS 0.7%
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution v…
- 9.3CVE-2026-102182EPSS 0.4%
A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires …
- 8.7CVE-2026-102180EPSS 0.4%
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a…
- 9.3CVE-2026-102178EPSS 0.5%
A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flow…
- 8.7CVE-2026-102174EPSS 0.6%
A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of servi…
- 8.7CVE-2026-102069EPSS 0.4%
A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service …
- 9.2CVE-2026-102068EPSS 0.7%
A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LD…
- 8.7CVE-2026-102061EPSS 0.3%
A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap m…
- 8.7CVE-2026-102057EPSS 0.4%
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and…
- 8.7CVE-2026-102055EPSS 0.3%
A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or…
- 8.7CVE-2026-102052EPSS 0.3%
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privil…
- 8.7CVE-2026-102050EPSS 0.3%
A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets…
- 8.7CVE-2026-102049EPSS 0.3%
A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service or execute arbitrary code with root privileges via …
- 8.7CVE-2026-102014EPSS 0.4%
A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADI…
- 9.3CVE-2026-101990EPSS 0.6%
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending…
- 9.2CVE-2026-101955EPSS 0.5%
A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS…
- 7.5CVE-2026-76655EPSS 0.6%
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution
- 6.4CVE-2026-73795EPSS 0.1%
A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.
- 8.7CVE-2026-101341EPSS 0.3%
Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function point…
- 8.7CVE-2026-101339EPSS 0.3%
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD …
- 8.7CVE-2026-101338EPSS 0.3%
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which a…
- 8.7CVE-2026-101337EPSS 0.3%
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written …
- 8.0CVE-2026-96956EPSS 0.6%
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
- 7.5CVE-2026-88083EPSS 0.5%
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-83965EPSS 0.2%
Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…
- 5.5CVE-2026-103827EPSS 0.1%
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service …
- 5.5CVE-2026-103823EPSS 0.1%
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service …
- 7.8CVE-2026-103854EPSS 0.2%
Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malici…
- 7.8CVE-2026-103851EPSS 0.2%
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op…
- 7.8CVE-2026-103830EPSS 0.2%
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op…
- 8.8CVE-2026-97770EPSS 0.7%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-97761EPSS 0.8%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-97750EPSS 0.8%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-97742EPSS 0.9%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-97012EPSS 0.7%
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.