VYPR

CWE-121

Stack-based Buffer Overflow

VariantDraftLikelihood: High

Description

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (3,626)

page 122 of 182
  • CVE-2025-55498HigAug 20, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.

  • CVE-2025-55482HigAug 20, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.

  • CVE-2025-55483HigAug 20, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList.

  • CVE-2025-46405HigAug 13, 2025
    risk 0.49cvss 7.5epss 0.00

    When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2025-36097HigJul 16, 2025
    risk 0.49cvss 7.5epss 0.00

    IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory…

  • CVE-2024-56468HigJul 8, 2025
    risk 0.49cvss 7.5epss 0.00

    IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service.

  • CVE-2025-6073HigJul 3, 2025
    risk 0.49cvss 7.5epss 0.00

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and user/password broker authentication is enabled, and CVE-2025-6074 is exploited, the attacker can…

  • CVE-2025-6072HigJul 3, 2025
    risk 0.49cvss 7.5epss 0.00

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of…

  • CVE-2025-50260HigJul 3, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter.

  • CVE-2025-43025HigJul 2, 2025
    risk 0.49cvss 7.5epss 0.00

    HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older (e.g., v7.3.x, v7.2.x, v7.1.x, etc.).

  • CVE-2024-53621HigJun 30, 2025
    risk 0.49cvss 7.5epss 0.00

    A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2025-48060HigMay 21, 2025
    risk 0.49cvss 7.5epss 0.01

    jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication,…

  • CVE-2025-25455HigApr 17, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2.

  • CVE-2025-25454HigApr 17, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2.

  • CVE-2025-25457HigApr 17, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2.

  • CVE-2025-28135HigMar 27, 2025
    risk 0.49cvss 7.5epss 0.01

    TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi.

  • CVE-2025-29149HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

  • CVE-2025-29121HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.00

    A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buffer overflow.

  • CVE-2024-57440HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.01

    D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg function of the webproc cgi

  • CVE-2025-29214HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C function at /goform/setMacFilterCfg.