CWE-121

High likelihood

Stack-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

3,544 vulnerabilities with CWE-121
CVE-2026-43661 HIGH
iOS and iPadOS < 26.5 - Stack-based Buffer Overflow via Maliciously Crafted Image
CVSS 7.5
CVE-2026-28897 MEDIUM
iOS and iPadOS < 18.7.9 - Stack-based Buffer Overflow
CVSS 6.2
CVE-2026-28848 HIGH
macOS < 15.7.7 and < 26.5 - Remote Denial of Service via Stack-based Buffer Overflow
CVSS 7.5
CVE-2026-28846 HIGH
iOS and iPadOS < 18.7.9 - Stack-based Buffer Overflow
CVSS 7.5
CVE-2026-42050 MEDIUM
ImageMagick: Stack buffer overflow in XTileImage
CVSS 5.5
CVE-2026-8258 MEDIUM
Squirrel sqstdstring.cpp validate_format stack-based overflow
CVSS 5.3
CVE-2026-8234 HIGH
EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow
CVSS 8.8
CVE-2026-6665 HIGH
PgBouncer buffer overflow in SCRAM
CVSS 8.1
CVE-2026-29974 HIGH
kosma minmea 0.3.0 - Buffer Overflow
CVSS 7.5
CVE-2026-29972 HIGH
nanoMODBUS <=v1.22.0 - Buffer Overflow
CVSS 8.2
CVE-2026-41509 CRITICAL
Integer underflow in crypto_sign_open() leads to buffer overflow
CVSS 9.8
CVE-2026-8138 HIGH
Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow
CVSS 8.8
CVE-2026-41286 MEDIUM
Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B
CVSS 6.5
CVE-2026-41287 MEDIUM
Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A
CVSS 6.5
CVE-2026-34464 HIGH
Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field
CVSS 8.8
CVE-2026-34462 HIGH
Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy
CVSS 7.8
CVE-2026-34461 HIGH
Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation
CVSS 7.8
CVE-2026-34459 HIGH
Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave
CVSS 8.8
CVE-2026-7851 HIGH
D-Link DI-8100 yyxz.asp sprintf stack-based overflow
CVSS 7.2
CVE-2026-7834 CRITICAL
EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow
CVSS 9.8
CVE-2026-41927 HIGH
WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi
CVE-2026-30363 HIGH
flipperzero-firmware ad2a80 - Buffer Overflow
CVSS 8.4
CVE-2026-42485 HIGH
AGL agl-service-can-low-level - Buffer Overflow
CVSS 7.5
CVE-2026-42469 HIGH
Open Vehicle Monitoring System 3.3.005 - Buffer Overflow
CVSS 8.6
CVE-2026-42468 HIGH
Open Vehicle Monitoring System 3.3.005 - Buffer Overflow
CVSS 8.8
Details
Vulnerabilities 3,544
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits