CWE-121

High likelihood

Stack-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

3,541 vulnerabilities with CWE-121
CVE-2026-15722 HIGH
389 Directory Server - Unauthenticated Stack Buffer Overflow Denial of Service
CVSS 7.5
CVE-2026-10535 HIGH
IBM Db2 11.5.0-11.5.9/12.1.0-12.1.4 db2flacc - Privilege Escalation
CVSS 8.4
CVE-2026-11771 HIGH
OpenVPN - Stack-based Buffer Overflow
CVE-2026-7260 MEDIUM
Stack overflow in phar with circular symlinks
CVE-2026-67248 HIGH
Asustor Inc. Adm < 5.1.3.RI81 - Buffer Overflow
CVE-2026-13309 MEDIUM
Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability
CVSS 6.8
CVE-2026-5056 HIGH
GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-12935 HIGH
Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature
CVE-2026-67192 HIGH
Xlight FTP Server < 3.9.5 Pre-Auth Stack Buffer Overflow via SSH GCM Cipher
CVSS 8.1
CVE-2026-58181 HIGH
Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash
CVSS 7.5
CVE-2026-58180 HIGH
Apache Traffic Server: txn_box plugin overflows the stack from attacker input
CVSS 7.5
CVE-2026-58179 HIGH
Apache Traffic Server: regex_remap plugin overflows the stack from attacker input
CVSS 8.1
CVE-2026-58158 MEDIUM
Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow
CVSS 5.9
CVE-2026-33930 MEDIUM
Apache Traffic Server: Buffer overflow via Host field that has a long string value
CVSS 5.9
CVE-2026-43771 HIGH
macOS < 14.8.8, < 15.7.8, < 26.6 - Denial of Service via Stack Overflow
CVSS 7.1
CVE-2026-51244 HIGH
ESP32-audioI2S 3.4.5 - Stack-based Buffer Overflow and Heap Buffer Overflow via UnpackFrameHeader Index Parameters
CVSS 7.5
CVE-2026-12495 MEDIUM
Stack-Based Buffer Overflow in the Mercusys MB115-4G
CVE-2026-55728 LOW
Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict
CVE-2026-16870 HIGH
Multiple Security Vulnerabilities in Snowflake libsnowflakeclient
CVSS 8.8
CVE-2026-50039 HIGH
Stack-based Buffer Overflow in MZ Automation libIEC61850
CVSS 7.5
CVE-2026-64831 HIGH
FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder
CVSS 8.8
CVE-2026-61391 HIGH
Hikvision DS-2CD Series - Buffer Overflow
CVSS 7.2
CVE-2026-16418 HIGH
Google Chrome - Stack-based Buffer Overflow
CVSS 8.8
CVE-2026-59144 CRITICAL
Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq
CVSS 9.8
CVE-2026-16461 MEDIUM
Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting
CVSS 6.5
Details
Vulnerabilities 3,541
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits