CWE-121

High likelihood

Stack-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

3,424 vulnerabilities with CWE-121
CVE-2021-27382 HIGH
Solid Edge <SE2020MP13, SE2020MP14, SE2021MP4 - Buffer Overflow
CVSS 7.8
CVE-2021-25669 CRITICAL
SCALANCE X200-4P IRT Firmware < 5.5.1 - Stack-based Buffer Overflow via Web Server POST Request Handling
CVSS 9.8
CVE-2021-30496 MEDIUM
Telegram 7.6.2 for iOS - Denial of Service via Persian Language Message Paste
CVSS 5.7
CVE-2021-27248 HIGH
D-Link DAP-2020 v1.01rc001 - Unauthenticated Stack-based Buffer Overflow via getpage Parameter
CVSS 8.8
CVE-2021-27246 HIGH
TP-Link Archer A7 AC1750 1.0.15 - RCE
CVSS 8.0
CVE-2021-28797 CRITICAL
QNAP Surveillance Station < 5.1.5.3.3 - Stack-based Buffer Overflow
CVSS 9.8
CVE-2021-27239 HIGH
NETGEAR R6400/R6700 <1.0.4.98 - Code Injection
CVSS 8.8
CVE-2021-29097 HIGH
Esri ArcGIS Engine/Pro/Map/Reader < 10.8.1/2.7 - Unauthenticated Buffer Overflow via Crafted File
CVSS 7.8
CVE-2021-1287 HIGH
Cisco RV132W and RV134W Firmware - Authenticated Remote Code Execution via Web Interface Input Validation
CVSS 7.2
CVE-2021-25667 HIGH
Siemens SCALANCE and RUGGEDCOM - Stack-based Buffer Overflow in STP BPDU Frame Handling
CVSS 8.8
CVE-2021-22666 HIGH
Fatek FvDesigner <1.5.76 - Buffer Overflow
CVSS 7.8
CVE-2021-26567 HIGH
Synology Diskstation Manager < 6.2.3-25426-3 - Out-of-Bounds Write
CVSS 7.8
CVE-2021-26561 CRITICAL
Synology DiskStation Manager < 6.2.3-25426-3 - Stack-Based Buffer Overflow via syno_finder_site HTTP Header
CVSS 9.0
CVE-2021-1348 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1347 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1346 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1345 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1344 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1343 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1342 HIGH
Cisco Small Business RV Series Routers - Authenticated RCE and DoS via Web Interface
CVSS 7.2
CVE-2021-1341 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1340 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
CVE-2021-1339 HIGH
Cisco Small Business RV Series Routers - Authenticated RCE and DoS via Web Interface
CVSS 7.2
CVE-2021-1338 HIGH
Cisco RV Series Routers Authenticated RCE and DoS via Web Interface
CVSS 7.2
CVE-2021-1337 HIGH
Cisco RV016, RV042, RV042G, RV082, RV320, RV325 Routers - Authenticated RCE or DoS via Web Interface
CVSS 7.2
Details
Vulnerabilities 3,424
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits