VYPR

CWE-121

Stack-based Buffer Overflow

VariantDraftLikelihood: High

Description

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (3,805)

page 129 of 191
  • CVE-2024-56468HigJul 8, 2025
    risk 0.49cvss 7.5epss 0.00

    IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service.

  • CVE-2025-6073HigJul 3, 2025
    risk 0.49cvss 7.5epss 0.00

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and user/password broker authentication is enabled, and CVE-2025-6074 is exploited, the attacker can…

  • CVE-2025-6072HigJul 3, 2025
    risk 0.49cvss 7.5epss 0.00

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of…

  • CVE-2025-50260HigJul 3, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter.

  • CVE-2025-43025HigJul 2, 2025
    risk 0.49cvss 7.5epss 0.00

    HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older (e.g., v7.3.x, v7.2.x, v7.1.x, etc.).

  • CVE-2024-53621HigJun 30, 2025
    risk 0.49cvss 7.5epss 0.00

    A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2025-48060HigMay 21, 2025
    risk 0.49cvss 7.5epss 0.01

    jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication,…

  • CVE-2025-25455HigApr 17, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2.

  • CVE-2025-25454HigApr 17, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2.

  • CVE-2025-25457HigApr 17, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2.

  • CVE-2025-28135HigMar 27, 2025
    risk 0.49cvss 7.5epss 0.01

    TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi.

  • CVE-2025-29149HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

  • CVE-2025-29121HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.00

    A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buffer overflow.

  • CVE-2024-57440HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.01

    D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg function of the webproc cgi

  • CVE-2025-29214HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.01

    Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C function at /goform/setMacFilterCfg.

  • CVE-2025-29101HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.00

    Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the get_parentControl_list_Info function.

  • CVE-2024-52924HigMar 6, 2025
    risk 0.49cvss 7.5epss 0.00

    An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Lack of boundary check during the…

  • CVE-2024-47907HigNov 12, 2024
    risk 0.49cvss 7.5epss 0.02

    A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.

  • CVE-2024-6137HigSep 13, 2024
    risk 0.49cvss 7.6epss 0.01

    BT: Classic: SDP OOB access in get_att_search_list

  • CVE-2024-46047HigSep 13, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.