VYPR

CWE-121

Stack-based Buffer Overflow

VariantDraftLikelihood: High

Description

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (3,602)

page 7 of 181
  • CVE-2026-4254CriMar 16, 2026
    Tenda
    AC8
    risk 0.64cvss 9.8epss 0.01

    A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local_2c causes stack-based buffer overflow. The attack can…

  • CVE-2026-4184CriMar 16, 2026
    Dlink
    DIR-816
    risk 0.64cvss 9.8epss 0.01

    A vulnerability was detected in D-Link DIR-816 1.10CNB05. Affected by this vulnerability is an unknown functionality of the file /goform/form2Wl5BasicSetup.cgi of the component goahead. Performing a manipulation of the argument pskValue results in stack-based buffer overflow.…

  • CVE-2026-4183CriMar 16, 2026
    Dlink
    DIR-816
    risk 0.64cvss 9.8epss 0.01

    A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file /goform/form2WlanBasicSetup.cgi of the component goahead. Such manipulation of the argument pskValue leads to stack-based buffer overflow. The attack can be…

  • CVE-2026-4182CriMar 16, 2026
    Dlink
    DIR-816
    risk 0.64cvss 9.8epss 0.01

    A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of the file /goform/form2Wl5RepeaterStep2.cgi of the component goahead. This manipulation of the argument key1/key2/key3/key4/pskValue causes stack-based buffer overflow. Remote…

  • CVE-2026-4181CriMar 16, 2026
    Dlink
    DIR-816
    risk 0.64cvss 9.8epss 0.01

    A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow. The attack…

  • CVE-2026-25823CriMar 13, 2026
    Hms Networks
    Ewon Flexy
    risk 0.64cvss 9.8epss 0.01

    HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads to a Denial of Service, which can also be exploited to achieve Unauthenticated Remote Code Execution.

  • CVE-2025-70245CriMar 12, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode.

  • CVE-2026-3823CriMar 9, 2026
    Atop Technologies
    EHG2408 series switch
    risk 0.64cvss 9.8epss 0.01

    EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.

  • CVE-2025-70233CriMar 5, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard.

  • CVE-2025-70232CriMar 5, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter.

  • CVE-2025-70230CriMar 5, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.

  • CVE-2025-70229CriMar 5, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule.

  • CVE-2025-70222CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.00

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode.

  • CVE-2025-70225CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.00

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig component

  • CVE-2025-70221CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.00

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin.

  • CVE-2025-70219CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.03

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot.

  • CVE-2025-70226CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.00

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard.

  • CVE-2025-70223CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork.

  • CVE-2025-70220CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4.

  • CVE-2025-70218CriMar 4, 2026
    Dlink
    DIR-513
    risk 0.64cvss 9.8epss 0.01

    Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via POST to the goform/formAdvFirewall component.