cve.bz

CWE-121: Stack-based Buffer Overflow, page 33

Filter

The product writes past the end of a buffer that was allocated on the stack.

What the weakness is: CWE-121 at MITRE

Ask an AI about CWE-121

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-121: Stack-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/121.html and https://cve.bz/cve/cwe/121?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2025-60561EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail.

  2. 7.5CVE-2025-60559EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter.

  3. 7.5CVE-2025-60558EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ.

  4. 7.5CVE-2025-60557EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard.

  5. 7.5CVE-2025-60556EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1.

  6. 7.5CVE-2025-60555EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode.

  7. 7.5CVE-2025-60552EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup.

  8. 7.5CVE-2025-60551EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page parameter in the function formDeviceReboot.

  9. 7.5CVE-2025-60550EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone.

  10. 7.5CVE-2025-60549EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4.

  11. 7.5CVE-2025-60547EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard7.

  12. 7.5CVE-2025-60572EPSS 0.5%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork.

  13. 7.5CVE-2025-60571EPSS 0.5%

    D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS.

  14. 7.5CVE-2025-60570EPSS 0.5%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery.

  15. 7.5CVE-2025-60569EPSS 0.5%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute.

  16. 7.5CVE-2025-60568EPSS 0.4%

    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall.

  17. 7.5CVE-2025-60342EPSS 0.4%

    Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  18. 7.5CVE-2025-60341EPSS 0.4%

    Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  19. 7.5CVE-2025-60334EPSS 0.6%

    TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  20. 7.5CVE-2025-60333EPSS 0.5%

    TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  21. 7.5CVE-2025-60331EPSS 0.6%

    D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  22. 7.5CVE-2025-60751ExploitEPSS 2.3%

    GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

  23. 1.9CVE-2020-36855EPSS 0.2%

    A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of the argument StorageQuota leads to stack-based buffer overflow. Local access is…

  24. 7.5CVE-2025-11678EPSS 0.3%

    Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order…

  25. 7.1CVE-2025-5555EPSS 0.2%

    A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local acce…

  26. 7.8CVE-2025-62580EPSS 0.2%

    ASDA-Soft Stack-based Buffer Overflow Vulnerability

  27. 7.8CVE-2025-62579EPSS 0.2%

    ASDA-Soft Stack-based Buffer Overflow Vulnerability

  28. 7.5CVE-2025-20350EPSS 0.5%

    A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affect…

  29. 9.3CVE-2025-53521KEVEPSS 2.3%

    When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  30. 9.2CVE-2017-20205EPSS 0.7%

    Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function `nexttoken` copies characters from an input string into a fixed-size stack buffer without perfor…

  31. 7.8CVE-2025-54274EPSS 0.2%

    Substance3D - Viewer versions 0.25.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

  32. 7.8CVE-2025-24052EPSS 2.5%

    Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed …

  33. 7.8CVE-2023-46718EPSS 0.2%

    A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthori…

  34. 8.8CVE-2025-20719EPSS 0.3%

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not need…

  35. 7.8CVE-2025-20718EPSS 0.2%

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  36. 7.8CVE-2025-20717EPSS 0.1%

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed fo…

  37. 7.8CVE-2025-20714EPSS 0.1%

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed fo…

  38. 7.8CVE-2025-20713EPSS 0.1%

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed fo…

  39. 6.8CVE-2025-9336EPSS 0.2%

    A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution. Refer to the 'Security Update f…

  40. 5.5CVE-2025-58301EPSS 0.10%

    Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

  41. 5.5CVE-2025-58300EPSS 0.10%

    Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

  42. 5.5CVE-2025-58298EPSS 0.09%

    Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.

  43. 5.5CVE-2025-58297EPSS 0.09%

    Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.

  44. 5.5CVE-2025-58295EPSS 0.09%

    Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.

  45. 7.4CVE-2025-11586EPSS 0.9%

    A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carr…

  46. 8.4CVE-2025-61856EPSS 0.2%

    A stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), …

  47. 7.4CVE-2025-11549EPSS 8.9%

    A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based b…

  48. 7.5CVE-2025-61577EPSS 5.8%

    D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  49. 7.8CVE-2025-47347EPSS 0.09%

    Memory corruption while processing control commands in the virtual memory management interface.

  50. 7.4CVE-2025-11528EPSS 0.8%

    A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQos. The manipulation of the argument enable leads to stack-based buffer overflow. Remote exploitation of the attack is p…