CWE-121

High likelihood

Stack-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

3,424 vulnerabilities with CWE-121
CVE-2023-45481 CRITICAL
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn - Stack-based Buffer Overflow via SetFirewallCfg FirewallEn Parameter
CVSS 9.8
CVE-2023-35127 HIGH
Fuji Electric Tellus Lite V-Simulator < 4.0.19.0 - Stack-based Buffer Overflow via Crafted Input File
CVSS 7.8
CVE-2023-5055 HIGH
le_ecred_reconf_req - Info Disclosure
CVSS 8.3
CVE-2023-4249 HIGH
Zavio IP Cameras <M2.1.6.05 - Command Injection
CVSS 8.8
CVE-2023-45225 CRITICAL
Zavio IP Cameras Firmware M2.1.6.05 - Stack-based Buffer Overflow in XML Parser
CVSS 9.8
CVE-2023-43755 CRITICAL
Zavio IP Cameras Firmware M2.1.6.05 - Stack-based Buffer Overflow in XML Element Parsing
CVSS 9.8
CVE-2023-3959 CRITICAL
Zavio IP Cameras Firmware M2.1.6.05 - Stack-based Buffer Overflow in XML Element Processing
CVSS 9.8
CVE-2023-39435 HIGH
Zavio IP Cameras Firmware M2.1.6.05 - Stack-based Buffer Overflow
CVSS 8.8
CVE-2023-39281 CRITICAL
Insyde InsydeH2O 5.0-5.5 - Stack-based Buffer Overflow in AsfSecureBootDxe
CVSS 9.8
CVE-2023-31419 MEDIUM
Elasticsearch 7.0.0-7.17.12 - Denial of Service via _search API Query String
CVSS 6.5
CVE-2023-46564 CRITICAL
TOTOLINK X2000R Gh - Buffer Overflow
CVSS 9.8
CVE-2023-46563 CRITICAL
TOTOLINK X2000R Gh - Buffer Overflow
CVSS 9.8
CVE-2023-46562 CRITICAL
TOTOLINK X2000R Gh <v1.0.0-B20230221.0948 - Buffer Overflow
CVSS 9.8
CVE-2023-46560 CRITICAL
TOTOLINK X2000R Gh - Buffer Overflow
CVSS 9.8
CVE-2023-46559 CRITICAL
TOTOLINK X2000R Gh <v1.0.0-B20230221.0948 - Buffer Overflow
CVSS 9.8
CVE-2023-46553 CRITICAL
TOTOLINK X2000R Gh - Buffer Overflow
CVSS 9.8
CVE-2023-46552 CRITICAL
TOTOLINK X2000R Gh <v1.0.0-B20230221.0948 - Buffer Overflow
CVSS 9.8
CVE-2023-43492 CRITICAL
Weintek's cMT3000 - Buffer Overflow
CVSS 9.8
CVE-2023-38584 CRITICAL
Weintek's cMT3000 - Buffer Overflow
CVSS 9.8
CVE-2023-35986 HIGH
Sante DICOM Viewer Pro - Buffer Overflow
CVSS 7.8
CVE-2023-4601 HIGH
NI System Configuration <2023 Q3 - Buffer Overflow
CVSS 8.1
CVE-2023-41712 MEDIUM
SonicOS < 7.0.1-5145 - Authenticated Stack-Based Buffer Overflow via SSL VPN plainprefs.exp URL Endpoint
CVSS 6.5
CVE-2023-41711 MEDIUM
SonicOS < 7.0.1-5145 - Authenticated Stack-Based Buffer Overflow via sonicwall.exp and prefs.exp Endpoints
CVSS 6.5
CVE-2023-39280 MEDIUM
SonicOS < 7.0.1-5145 - Authenticated Stack-Based Buffer Overflow via SSO Stats Endpoints
CVSS 6.5
CVE-2023-39279 MEDIUM
SonicOS < 7.0.1-5145 - Authenticated Stack-Based Buffer Overflow via getPacketReplayData.json Endpoint
CVSS 6.5
Details
Vulnerabilities 3,424
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits