CWE-121: Stack-based Buffer Overflow, page 7
Filter
The product writes past the end of a buffer that was allocated on the stack.
What the weakness is: CWE-121 at MITRE
Ask an AI about CWE-121
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-121: Stack-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/121.html and https://cve.bz/cve/cwe/121?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.6CVE-2026-91001EPSS 0.9%
A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results…
- 1.9CVE-2026-90824EPSS 0.2%
A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be …
- 6.9CVE-2026-54559EPSS 0.5%
PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders …
- 5.3CVE-2026-89020EPSS 0.5%
MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by suppl…
- 5.6CVE-2026-19542EPSS 0.2%
Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explic…
- 9.4CVE-2026-90693EPSS 0.9%
A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the att…
- 9.4CVE-2026-90692EPSS 0.9%
A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer over…
- 8.7CVE-2026-90689EPSS 0.9%
A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The …
- 7.1CVE-2026-90688EPSS 0.7%
A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflo…
- 5.3CVE-2026-82785EPSS 0.5%
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.
- 8.8CVE-2023-46273EPSS 0.5%
Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.
- 9.4CVE-2026-90680EPSS 0.9%
A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNAP1. The manipulation of the argument PAddress/SubnetMask/Ga…
- 7.5CVE-2026-33963EPSS 0.1%
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of servic…
- 8.7CVE-2026-90779EPSS 0.8%
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to co…
- 9.3CVE-2026-90558EPSS 0.9%
sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or o…
- 7.5CVE-2026-86093EPSS 0.4%
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that impro…
- 7.0CVE-2026-15419EPSS 0.2%
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
- 8.6CVE-2026-88047EPSS 0.1%
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operator>>(char*) to extract a whites…
- 7.5CVE-2026-88289EPSS 0.6%
GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the…
- 7.5CVE-2026-88287EPSS 0.5%
GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.
- 4.9CVE-2026-88284EPSS 0.4%
GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.
- 4.9CVE-2026-88283EPSS 0.4%
GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.
- 4.9CVE-2026-88281EPSS 0.4%
GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.
- 4.9CVE-2026-88280EPSS 0.4%
GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.
- 4.9CVE-2026-88279EPSS 0.4%
GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker.
- 6.5CVE-2026-88268EPSS 0.4%
GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.
- 8.4CVE-2026-42805EPSS 0.2%
A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser function bhi385_parse_debug_message (located in bhi385_parse.c). The function parses FIFO events and…
- 7.6CVE-2026-42804EPSS 0.3%
A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem in…
- 7.0CVE-2026-82079EPSS 0.3%
A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted networ…
- 5.6CVE-2026-21093EPSS 0.1%
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
- 8.5CVE-2026-85384EPSS 0.3%
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local net…
- 1.2CVE-2026-9216EPSS 0.4%
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or …
- 7.8CVE-2026-83990EPSS 0.3%
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-81953EPSS 0.5%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.8CVE-2026-81396EPSS 0.5%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.8CVE-2026-81388EPSS 0.5%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 8.8CVE-2026-78504EPSS 0.8%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-78439EPSS 0.8%
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-73006EPSS 0.8%
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- 9.8CVE-2026-72982EPSS 1.0%
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-71337EPSS 0.3%
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-69910EPSS 1.0%
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-69762EPSS 0.8%
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- 8.8CVE-2026-69759EPSS 0.8%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-69722EPSS 0.8%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-69714EPSS 0.8%
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
- 8.8CVE-2026-69689EPSS 0.8%
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- 8.8CVE-2026-69686EPSS 0.8%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- 8.1CVE-2026-69620EPSS 0.7%
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-69614EPSS 0.9%
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.