← Back
CWE-121

3,767 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (3,767)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Jun 17, 2026
May 9, 2025
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary cod...Show more
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.Show less
-
-
Jun 17, 2026
May 9, 2025
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary cod...Show more
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.Show less
-
-
Jun 17, 2026
May 9, 2025
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary cod...Show more
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.Show less
1Totolink
1A950rg Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/...Show more
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so.Show less
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so.
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules.
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules.
1Totolink
1A3100r Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.
1Alfa
1Aip W512 Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function.
1Alfa
1Aip W512 Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
1Rti
1Connext Professional
Jun 17, 2026
May 8, 2025
6.9 MEDIUM· v4
7.8 HIGH· v3
N/A· v2
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext...Show more
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 4.5c before 5.2.*.Show less
1Tenda
1Fh451 Firmware
Jun 17, 2026
May 7, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.
1Tenda
1Rx3 Firmware
Jun 17, 2026
May 6, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads to stack overflow.
1Google
1Tensorflow Serving
Jun 17, 2026
May 6, 2025
8.9 HIGH· v4
7.5 HIGH· v3
N/A· v2
Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.
1Tenda
1Rx3 Firmware
Jun 17, 2026
May 6, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.