Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVEs (3,767)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-6888 1Phz76 1Rtspserver Jun 17, 2026 Dec 17, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The...Show more A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248248. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-33222 1Idemia 7Morphowave Compact Firmware Morphowave Sp FirmwareMorphowave Xp Firmware+4 more Jun 17, 2026 Dec 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer ov...Show more When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device Show less
CVE-2023-33220 1Idemia 7Morphowave Compact Firmware Morphowave Sp FirmwareMorphowave Xp Firmware+4 more Jun 17, 2026 Dec 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote C...Show more During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device Show less
CVE-2023-33219 1Idemia 7Morphowave Compact Firmware Morphowave Sp FirmwareMorphowave Xp Firmware+4 more Jun 17, 2026 Dec 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Co...Show more The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device Show less
CVE-2023-33218 1Idemia 7Morphowave Compact Firmware Morphowave Sp FirmwareMorphowave Xp Firmware+4 more Jun 17, 2026 Dec 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device.
CVE-2023-50268 1Jqlang 1Jq Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue.
CVE-2023-36006 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Dec 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-35634 1Microsoft 3Windows 11 21h2 Windows 11 22h2Windows 11 23h2 Jun 17, 2026 Dec 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Bluetooth Driver Remote Code Execution Vulnerability
CVE-2023-49424 1Tenda 1Ax12 Firmware Jun 17, 2026 Dec 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-5944 1Deltaww 1Dopsoft Jun 17, 2026 Dec 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.
CVE-2023-40465 1Sierrawireless 1Aleos Jun 17, 2026 Dec 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captiv...Show more Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal. Show less
CVE-2023-44305 1Dell 1Dm5500 Firmware Jun 17, 2026 Dec 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on...Show more Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data. Show less
CVE-2023-49287 1Cxong 1Tinydir Jun 17, 2026 Dec 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.
CVE-2023-45481 1Tenda 1Ac10 Firmware Jun 17, 2026 Nov 29, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
CVE-2023-35127 1Fujielectric 1Tellus Lite V Simulator Jun 17, 2026 Nov 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Stack-based buffer overflow may occur when Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file.
CVE-2023-5055 1Zephyrproject 1Zephyr Jun 17, 2026 Nov 21, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Possible variant of CVE-2021-3434 in function le_ecred_reconf_req.
CVE-2023-4249 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binar...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests. Show less
CVE-2023-45225 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Show less
CVE-2023-43755 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the pr...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Show less
CVE-2023-3959 1Zavio 11B8220 Firmware B8520 FirmwareCb3211 Firmware+8 more Jun 17, 2026 Nov 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processi...Show more Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution. Show less

Previous 1...143144145...189 Next