VYPR

CWE-121

Stack-based Buffer Overflow

VariantDraftLikelihood: High

Description

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (3,626)

page 90 of 182
  • CVE-2026-12218HigJun 15, 2026
    risk 0.52cvss 8.0epss 0.00

    A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest of the component Web FastCGI Service. The manipulation of the argument port results in stack-based buffer overflow.…

  • CVE-2026-30814HigApr 8, 2026
    risk 0.52cvss 8.0epss 0.00

    A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a…

  • CVE-2026-5684HigApr 6, 2026
    risk 0.52cvss 8.0epss 0.01

    A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack requires access…

  • CVE-2025-60751HigOct 21, 2025
    risk 0.52cvss 7.5epss 0.02

    GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

  • CVE-2008-20001HigAug 30, 2025
    risk 0.52cvss epss 0.01

    activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable…

  • CVE-2013-10057HigAug 1, 2025
    risk 0.52cvss epss 0.01

    A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy…

  • CVE-2025-40596HigJul 23, 2025
    risk 0.52cvss 7.3epss 0.52

    A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

  • CVE-2025-25679HigFeb 20, 2025
    risk 0.52cvss 8.0epss 0.00

    Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function.

  • CVE-2024-46435HigFeb 10, 2025
    risk 0.52cvss 8.0epss 0.01

    A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling…

  • CVE-2024-11237HigNov 15, 2024
    risk 0.52cvss 7.5epss 0.05

    A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer…

  • CVE-2024-41592HigOct 3, 2024
    risk 0.52cvss 8.0epss 0.01

    DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.

  • CVE-2024-41590HigOct 3, 2024
    risk 0.52cvss 8.0epss 0.00

    Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6.

  • CVE-2024-41586HigOct 3, 2024
    risk 0.52cvss 8.0epss 0.00

    A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a remote attacker to execute arbitrary code via a long query string to the cgi-bin/ipfedr.cgi component.

  • CVE-2024-46313HigSep 30, 2024
    risk 0.52cvss 8.0epss 0.02

    TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm.

  • CVE-2024-23967HigSep 28, 2024
    risk 0.52cvss 8.0epss 0.01

    Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50…

  • CVE-2024-23959HigSep 28, 2024
    risk 0.52cvss 8.0epss 0.01

    Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50…

  • CVE-2024-23935HigSep 28, 2024
    risk 0.52cvss 8.0epss 0.00

    Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a…

  • CVE-2024-44859HigSep 4, 2024
    risk 0.52cvss 8.0epss 0.01

    Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.

  • CVE-2024-37978HigJul 9, 2024
    risk 0.52cvss 8.0epss 0.01

    Secure Boot Security Feature Bypass Vulnerability

  • CVE-2024-37972HigJul 9, 2024
    risk 0.52cvss 8.0epss 0.01

    Secure Boot Security Feature Bypass Vulnerability