cve.bz

CWE-121: Stack-based Buffer Overflow, page 8

Filter

The product writes past the end of a buffer that was allocated on the stack.

What the weakness is: CWE-121 at MITRE

Ask an AI about CWE-121

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-121: Stack-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/121.html and https://cve.bz/cve/cwe/121?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-69614EPSS 0.9%

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  2. 8.1CVE-2026-69510EPSS 0.7%

    Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  3. 7.8CVE-2026-69508EPSS 0.3%

    Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  4. 8.0CVE-2026-69503EPSS 0.8%

    Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

  5. 7.8CVE-2026-69467EPSS 0.3%

    Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  6. 8.8CVE-2026-69461EPSS 0.8%

    Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

  7. 8.0CVE-2026-69412EPSS 0.6%

    Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

  8. 7.8CVE-2026-69391EPSS 0.3%

    Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

  9. 8.0CVE-2026-69301EPSS 0.8%

    Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

  10. 7.8CVE-2026-69290EPSS 0.3%

    Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-69277EPSS 0.3%

    Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

  12. 8.0CVE-2026-68878EPSS 0.8%

    Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.

  13. 8.0CVE-2026-68838EPSS 0.8%

    Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

  14. 8.0CVE-2026-68834EPSS 0.8%

    Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

  15. 8.5CVE-2026-67379EPSS 0.7%

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  16. 8.8CVE-2026-62706EPSS 0.8%

    Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

  17. 8.7CVE-2026-77101EPSS 0.5%

    CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.

  18. 2.1CVE-2026-86514EPSS 0.5%

    A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carr…

  19. 8.6CVE-2026-86509EPSS 0.7%

    A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done …

  20. 5.5CVE-2026-86318EPSS 0.8%

    A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may …

  21. 9.3CVE-2026-86296EPSS 2.4%

    A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possib…

  22. 2.3CVE-2026-81738EPSS 0.3%

    OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries

  23. 6.7CVE-2026-20509EPSS 0.2%

    In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploi…

  24. 7.8CVE-2026-86140EPSS 0.2%

    In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

  25. 6.3CVE-2026-57166EPSS 0.5%

    PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several comm…

  26. 6.3CVE-2026-57165EPSS 0.5%

    PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall (handle_up_…

  27. 8.8CVE-2026-57163EPSS 0.4%

    PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls…

  28. 8.8CVE-2026-57162EPSS 0.6%

    PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer (sdes_encod…

  29. 8.8CVE-2026-57161EPSS 0.5%

    PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response (update_service_route() in pjs…

  30. 5.5CVE-2026-17270EPSS 0.3%

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.

  31. 6.5CVE-2026-17259EPSS 0.5%

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.

  32. 9.8CVE-2026-85509EPSS 0.5%

    FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

  33. 9.8CVE-2026-85508EPSS 0.4%

    ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).

  34. 9.8CVE-2026-85507EPSS 0.4%

    ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).

  35. 9.8CVE-2026-85506EPSS 0.5%

    ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).

  36. 9.8CVE-2026-85504EPSS 0.4%

    FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.

  37. 7.7CVE-2026-18167EPSS 0.4%

    A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve re…

  38. 7.8CVE-2026-73600EPSS 0.2%

    Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information …

  39. 7.4CVE-2023-20577EPSS 0.2%

    A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

  40. 8.3CVE-2026-84351EPSS 0.4%

    Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security sever…

  41. 4.9CVE-2026-73783EPSS 0.4%

    Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.

  42. 9.3CVE-2026-78012EPSS 0.6%

    An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a d…

  43. 4.8CVE-2026-12661EPSS 0.2%

    A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may c…

  44. 8.6CVE-2026-82616EPSS 0.9%

    A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack c…

  45. 8.6CVE-2026-82593EPSS 0.9%

    A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based …

  46. 8.6CVE-2026-82592EPSS 0.9%

    A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-b…

  47. 6.9CVE-2026-82478EPSS 0.5%

    A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_services/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket …

  48. 6.0CVE-2026-81533EPSS 0.4%

    An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the …

  49. 8.7CVE-2026-81532EPSS 0.5%

    A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not …

  50. 8.7CVE-2026-75118EPSS 0.4%

    A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated att…