Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVEs (3,519)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-25602 1Fortinet 1Fortiweb Jun 17, 2026 Feb 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versions 6.1.2 and earlier, FortiWeb versions 6.0.7 and earlier, Fo...Show more A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versions 6.1.2 and earlier, FortiWeb versions 6.0.7 and earlier, FortiWeb versions 5.9.1 and earlier, FortiWeb 5.8 all versions, FortiWeb 5.7 all versions, FortiWeb 5.6 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.Show less
CVE-2023-23781 1Fortinet 1Fortiweb Jun 17, 2026 Feb 16, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration may allow an authenticated attacker to achieve arbitrary cod...Show more A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted XML files.Show less
CVE-2023-23780 1Fortinet 1Fortiweb Jun 17, 2026 Feb 16, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifical...Show more A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifically crafted HTTP requests.Show less
CVE-2022-33871 1Fortinet 1Fortiweb Jun 17, 2026 Feb 16, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specific...Show more A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI `execute backup-local rename` and `execute backup-local show` operations.Show less
CVE-2022-30306 1Fortinet 1Fortiweb Jun 17, 2026 Feb 16, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to achieve arbitrary...Show more A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted password.Show less
CVE-2021-42756 1Fortinet 1Fortiweb Jun 17, 2026 Feb 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthen...Show more Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests.Show less
CVE-2023-24566 1Siemens 1Solid Edge Se2023 Jun 17, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-ba...Show more A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19472)Show less
CVE-2023-24549 1Siemens 1Solid Edge Se2023 Jun 17, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially...Show more A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2022-47936 1Siemens 3Jt Open Toolkit Jt UtilitiesParasolid Jun 17, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0...Show more A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150). The affected application contains a stack overflow vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2022-44448 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-42444 1Ibm 1App Connect Enterprise Jun 17, 2026 Feb 12, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID...Show more IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID: 238538.Show less
CVE-2022-33279 1Qualcomm 74Ar9380 Firmware Csr8811 FirmwareIpq4019 Firmware+71 more Jun 17, 2026 Feb 12, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
CVE-2023-24348 1Dlink 1Dir 605l Firmware Jun 17, 2026 Feb 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter.
CVE-2023-24347 1Dlink 1Dir 605l Firmware Jun 17, 2026 Feb 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus.
CVE-2023-24346 1Dlink 1Dir 605l Firmware Jun 17, 2026 Feb 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at /goform/formEasySetupWizard3.
CVE-2023-24345 1Dlink 1Dir 605l Firmware Jun 17, 2026 Feb 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplus.
CVE-2023-24344 1Dlink 1Dir 605l Firmware Jun 17, 2026 Feb 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup.
CVE-2023-24343 1Dlink 1Dir 605l Firmware Jun 17, 2026 Feb 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule.
CVE-2023-0770 2Debian Gpac 2Debian Linux Gpac Jun 17, 2026 Feb 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
CVE-2023-0250 1Deltaww 1Diascreen Jun 17, 2026 Feb 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.

Previous 1...141142143...176 Next