← Back
CWE-121

3,524 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (3,524)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Totolink
1A950rg Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/...Show more
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so.Show less
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so.
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules.
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules.
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.
1Alfa
1Aip W512 Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function.
1Alfa
1Aip W512 Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
1Rti
1Connext Professional
Jun 17, 2026
May 8, 2025
6.9 MEDIUM· v4
7.8 HIGH· v3
N/A· v2
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext...Show more
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 4.5c before 5.2.*.Show less
1Tenda
1Fh451 Firmware
Jun 17, 2026
May 7, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.
1Tenda
1Rx3 Firmware
Jun 17, 2026
May 6, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads to stack overflow.
1Google
1Tensorflow Serving
Jun 17, 2026
May 6, 2025
8.9 HIGH· v4
7.5 HIGH· v3
N/A· v2
Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.
1Tenda
1Rx3 Firmware
Jun 17, 2026
May 6, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.
1Dlink
1Dap 1520 Firmware
Jun 17, 2026
May 6, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handle...Show more
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dap 1520 Firmware
Jun 17, 2026
May 6, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow....Show more
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Fabian
1School Billing System
Jun 17, 2026
Apr 29, 2025
4.8 MEDIUM· v4
7.8 HIGH· v3
4.3 MEDIUM· v2
A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulation of the argument Name leads to stack-based buffer overflow....Show more
A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulation of the argument Name leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.Show less