Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVEs (3,520)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-35634 1Microsoft 3Windows 11 21h2 Windows 11 22h2Windows 11 23h2 Jun 17, 2026 Dec 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Bluetooth Driver Remote Code Execution Vulnerability
CVE-2023-49424 1Tenda 1Ax12 Firmware Jun 17, 2026 Dec 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-5944 1Deltaww 1Dopsoft Jun 17, 2026 Dec 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.
CVE-2023-40465 1Sierrawireless 1Aleos Jun 17, 2026 Dec 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captiv...Show more Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal. Show less
CVE-2023-44305 1Dell 1Dm5500 Firmware Jun 17, 2026 Dec 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on...Show more Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data. Show less
CVE-2023-49287 1Cxong 1Tinydir Jun 17, 2026 Dec 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.
CVE-2023-45481 1Tenda 1Ac10 Firmware Jun 17, 2026 Nov 29, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
CVE-2023-35127 1Fujielectric 1Tellus Lite V Simulator Jun 17, 2026 Nov 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Stack-based buffer overflow may occur when Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file.
CVE-2023-5055 1Zephyrproject 1Zephyr Jun 17, 2026 Nov 21, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Possible variant of CVE-2021-3434 in function le_ecred_reconf_req.
CVE-2023-4249 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binar...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests. Show less
CVE-2023-45225 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Show less
CVE-2023-43755 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the pr...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Show less
CVE-2023-3959 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processi...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Show less
CVE-2023-39435 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certai...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Show less
CVE-2023-39281 1Insyde 1Insydeh2o Jun 17, 2026 Nov 1, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.
CVE-2023-31419 1Elastic 1Elasticsearch Jun 17, 2026 Oct 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
CVE-2023-46564 1Totolink 1X2000r Firmware Jun 17, 2026 Oct 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.
CVE-2023-46563 1Totolink 1X2000r Firmware Jun 17, 2026 Oct 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS.
CVE-2023-46562 1Totolink 1X2000r Firmware Jun 17, 2026 Oct 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg.
CVE-2023-46560 1Totolink 1X2000r Firmware Jun 17, 2026 Oct 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup.

Previous 1...131132133...176 Next