← Back
CWE-121

3,519 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (3,519)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1Ax3 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution.
1Tenda
1Ax3 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted req...Show more
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.Show less
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted requ...Show more
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.Show less
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 21, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted...Show more
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.Show less
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 16, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 16, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Yenkee
1Yms 3029 Firmware
Jun 17, 2026
Jan 16, 2026
6.8 MEDIUM· v4
7.5 HIGH· v3
N/A· v2
Yenkee Hornet Gaming Mouse driver GM312Fltr.sys contains a buffer overrun vulnerability that allows attackers to crash the system by sending oversized input. Attackers can exploit the driver by sending a 2000-byte buffer...Show more
Yenkee Hornet Gaming Mouse driver GM312Fltr.sys contains a buffer overrun vulnerability that allows attackers to crash the system by sending oversized input. Attackers can exploit the driver by sending a 2000-byte buffer through DeviceIoControl to trigger a kernel-level system crash.Show less
1Juniper
1Junos
Jun 17, 2026
Jan 15, 2026
7.1 HIGH· v4
6.5 MEDIUM· v3
N/A· v2
A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service (DoS). Sub...Show more
A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service (DoS). Subscribing to telemetry sensors at scale causes all FPC connections to drop, resulting in an FPC crash and restart. The issue was not seen when YANG packages for the specific sensors were installed. This issue affects Junos OS:  * all versions before 22.4R3-S7, * 23.2 version before 23.2R2-S4, * 23.4 versions before 23.4R2.Show less
1Gpac
1Gpac
Jun 17, 2026
Jan 15, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 15, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Gpac
1Gpac
Jun 17, 2026
Jan 15, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file.
1Gpac
1Gpac
Jun 17, 2026
Jan 15, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file.
1Gpac
1Gpac
Jun 17, 2026
Jan 15, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 15, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 15, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
1Tenda
1Ax1806 Firmware
Jun 17, 2026
Jan 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.