cve.bz

CWE-562: Return of Stack Variable Address

Filter

A function returns the address of a stack variable.

What the weakness is: CWE-562 at MITRE. All weaknesses

Ask an AI about CWE-562

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-562: Return of Stack Variable Address and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/562.html and https://cve.bz/cve/cwe/562?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2026-26399EPSS 0.2%

    A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it i…

  2. 4.0CVE-2026-34553EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration logic affecting CIccCLUT::Iterate() and output produced by CIccMBB::Describe() (…

  3. 5.4CVE-2026-3591EPSS 0.4%

    A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly (mis)match an IP address. In a default…

  4. 7.8CVE-2024-33045EPSS 0.1%

    Memory corruption when BTFM client sends new messages over Slimbus to ADSP.

  5. 6.2CVE-2024-4418EPSS 0.5%

    A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in…

  6. 5.5CVE-2020-21686EPSS 0.4%

    A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.

  7. 9.8CVE-2022-41837EPSS 1.7%

    An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can pro…

  8. 7.8CVE-2021-21798EPSS 21%

    An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a stack variable to go out of scope, resulting in the application dereferencing …