← Back
CWE-121

4,077 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (4,077)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1Fh1202 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
1Tenda
1Fh1203 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
1Tenda
1Ac10u Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
1Tenda
1Fh1202 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
1Tenda
1Fh1203 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
1Tenda
1W30e Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
8.0 HIGH· v3
N/A· v2
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function.
1Tenda
1W30e Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function.
1Tenda
1W30e Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function.
1Tenda
1W30e Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function.
1Tenda
1W30e Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function.
1Tenda
1W30e Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
8.0 HIGH· v3
N/A· v2
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function.
1Tenda
1Fh1205 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the adslPwd parameter of the formWanParameterSetting function.
1Tenda
1F1203 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the adslPwd parameter of the formWanParameterSetting function.
1Tenda
1F1203 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
8.0 HIGH· v3
N/A· v2
Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle function.
1Tenda
1Fh1205 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
7.4 HIGH· v3
N/A· v2
Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
1Tenda
1Ac500 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.9(1307). Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argume...Show more
A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.9(1307). Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261146 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tenda
1Ac500 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307). Affected by this vulnerability is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput lead...Show more
A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307). Affected by this vulnerability is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261145 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tenda
1Ac500 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been rated as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-base...Show more
A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been rated as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261143. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tenda
1Ac500 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassw...Show more
A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-261142 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tenda
1Ac500 Firmware
Jun 17, 2026
Apr 17, 2024
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads...Show more
A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261141 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less