← Back
CWE-121

3,524 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (3,524)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1O1 Firmware
Jun 17, 2026
Aug 28, 2024
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability has been found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads...Show more
A vulnerability has been found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tenda
1G3 Firmware
Jun 17, 2026
Aug 27, 2024
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stac...Show more
A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tendacn
1G3 Firmware
Jun 17, 2026
Aug 27, 2024
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/mod...Show more
A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.
-
-
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers with access to the Web Terminal to achieve remote code execution via an HTTP POST /TermInput request.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Aug 26, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.
1Tenda
1Fh1206 Firmware
Jun 17, 2026
Aug 23, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset.
1Tenda
1Fh1206 Firmware
Jun 17, 2026
Aug 23, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.
1Tenda
1Fh1206 Firmware
Jun 17, 2026
Aug 23, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.
1Autman
1Autman
Jun 17, 2026
Aug 23, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
autMan v2.9.6 allows attackers to bypass authentication via a crafted web request.
1Autman
1Autman
Jul 5, 2026
Aug 23, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
autMan v2.9.6 was discovered to contain an access control issue.
1Autel
1Maxicharger Ac Elite Business C50 Firmware
Jun 17, 2026
Aug 21, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affect...Show more
Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the AppAuthenExchangeRandomNum BLE command. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-23384.Show less
1Autodesk
1Revit
Jun 17, 2026
Aug 21, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.