CWE-121

High likelihood

Stack-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

3,424 vulnerabilities with CWE-121
CVE-2023-41028 CRITICAL
Juplink RX4-1500 <1.0.5 - Buffer Overflow
CVSS 9.0
CVE-2023-29182 MEDIUM
Fortinet FortiOS <7.0.3 - Buffer Overflow
CVSS 6.4
CVE-2023-4273 MEDIUM
Linux Kernel exFAT - Buffer Overflow
CVSS 6.0
CVE-2023-0426 HIGH
ABB Freelance AC 700F and AC 900F - Stack-based Buffer Overflow
CVSS 8.6
CVE-2023-34552 HIGH
EZVIZ Camera Firmware - Unauthenticated Remote Code Execution via SADP Multicast Packet Parsing
CVSS 8.8
CVE-2023-33308 CRITICAL
Fortinet FortiOS <7.0.10,7.2.3 - Buffer Overflow
CVSS 9.8
CVE-2023-22363 MEDIUM
Gallagher Command Centre 8.80 < 8.80.1192 - Denial of Service via Cardholder Access Group Assignment
CVSS 6.5
CVE-2023-28728 HIGH
Panasonic Control FPWIN Pro <7.6.0.3 - Buffer Overflow
CVSS 7.8
CVE-2023-35012 MEDIUM
IBM Db2 11.5 - Authenticated Stack-based Buffer Overflow
CVSS 6.7
CVE-2023-35322 HIGH
Windows Deployment Services - Remote Code Execution via Stack-based Buffer Overflow
CVSS 8.8
CVE-2023-37375 HIGH
Siemens Tecnomatix Plant Simulation Stack-based Buffer Overflow via SPP File Parsing
CVSS 7.8
CVE-2023-37374 HIGH
Tecnomatix Plant Simulation V2201 < V2201.0008 and V2302 < V2302.0002 - Stack-based Buffer Overflow via STP File Parsing
CVSS 7.8
CVE-2023-25124 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow in vtysh_ubus set_openvpn_client
CVSS 7.2
CVE-2023-25123 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow in vtysh_ubus set_openvpn_client
CVSS 7.2
CVE-2023-25122 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus HTTP Request
CVSS 7.2
CVE-2023-25121 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus set_ike_profile Function
CVSS 7.2
CVE-2023-25120 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus set_dmvpn Function
CVSS 7.2
CVE-2023-25119 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow in vtysh_ubus set_pptp Function
CVSS 7.2
CVE-2023-25118 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow in vtysh_ubus set_openvpn_client
CVSS 7.2
CVE-2023-25117 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus set_openvpn_client
CVSS 7.2
CVE-2023-25116 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus set_openvpn_client
CVSS 7.2
CVE-2023-25115 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow in vtysh_ubus set_openvpn_client
CVSS 7.2
CVE-2023-25114 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus set_openvpn_client
CVSS 7.2
CVE-2023-25113 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus set_l2tp key
CVSS 7.2
CVE-2023-25112 HIGH
Milesight UR32L v32.3.0.5 - Authenticated Stack-based Buffer Overflow via vtysh_ubus set_l2tp Function
CVSS 7.2
Details
Vulnerabilities 3,424
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits