CWE-121 · Stack-based Buffer Overflow (page 12)
Page 12 of 37 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12225 | High | 8.8 | 2025-10-27 | A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP Requ… |
CVE-2025-12214 | High | 8.8 | 2025-10-27 | A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a mani… |
CVE-2025-12213 | High | 8.8 | 2025-10-27 | A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanCon… |
CVE-2025-12212 | High | 8.8 | 2025-10-27 | A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation… |
CVE-2025-12211 | High | 8.8 | 2025-10-27 | A security flaw has been discovered in Tenda O3 1.0.0.10(2478). Affected by this issue is the function SetValue/GetValue of the file /goform/setDmzInfo. The ma… |
CVE-2025-12210 | High | 8.8 | 2025-10-27 | A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. Th… |
CVE-2025-12209 | High | 8.8 | 2025-10-27 | A vulnerability was determined in Tenda O3 1.0.0.10(2478). Affected is the function SetValue/GetValue of the file /goform/setDhcpConfig. Executing a manipulati… |
CVE-2025-60566 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter. |
CVE-2025-60565 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule. |
CVE-2025-60564 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog. |
CVE-2025-60563 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr. |
CVE-2025-60562 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey. |
CVE-2025-60561 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail. |
CVE-2025-60559 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter. |
CVE-2025-60558 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ. |
CVE-2025-60557 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard. |
CVE-2025-60556 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1. |
CVE-2025-60555 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode. |
CVE-2025-60552 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup. |
CVE-2025-60551 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page parameter in the function formDeviceReboot. |
CVE-2025-60550 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone. |
CVE-2025-60549 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4. |
CVE-2025-60547 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard7. |
CVE-2025-60572 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork. |
CVE-2025-60571 | High | 7.5 | 2025-10-24 | D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS. |
CVE-2025-60570 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery. |
CVE-2025-60569 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute. |
CVE-2025-60568 | High | 7.5 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall. |
CVE-2025-60342 | High | 7.5 | 2025-10-22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to… |
CVE-2025-60341 | High | 7.5 | 2025-10-22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows at… |
CVE-2025-60334 | High | 7.5 | 2025-10-22 | TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability… |
CVE-2025-60333 | High | 7.5 | 2025-10-22 | TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerab… |
CVE-2025-60331 | High | 7.5 | 2025-10-22 | D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint. This vulnerability allow… |
CVE-2025-60751 | High | 7.5 | 2025-10-21 | GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. |
CVE-2020-36855 | Medium | 5.3 | 2025-10-21 | A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of… |
CVE-2025-11678 | | 2025-10-20 | Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to ove… | |
CVE-2025-5555 | High | 7.8 | 2025-10-18 | A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component I… |
CVE-2025-62580 | High | 7.8 | 2025-10-16 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
CVE-2025-62579 | High | 7.8 | 2025-10-16 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
CVE-2025-20350 | High | 7.5 | 2025-10-15 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could… |
CVE-2025-53521 | Critical | 9.8 | 2025-10-15 | When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versio… |
CVE-2017-20205 | | 2025-10-15 | Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function `nexttoken` copi… | |
CVE-2025-54274 | High | 7.8 | 2025-10-14 | Substance3D - Viewer versions 0.25.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in t… |
CVE-2025-24052 | High | 7.8 | 2025-10-14 | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcem… |
CVE-2023-46718 | Medium | 6.7 | 2025-10-14 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2… |
CVE-2025-20719 | High | 8.8 | 2025-10-14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privil… |
CVE-2025-20718 | High | 7.8 | 2025-10-14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User executi… |
CVE-2025-20717 | High | 7.8 | 2025-10-14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2025-20714 | High | 7.8 | 2025-10-14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2025-20713 | High | 7.8 | 2025-10-14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious ac… |
CVE-2025-9336 | | 2025-10-13 | A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (… | |
CVE-2025-58301 | Medium | 6.2 | 2025-10-11 | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58300 | Medium | 6.2 | 2025-10-11 | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58298 | High | 7.3 | 2025-10-11 | Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58297 | Medium | 5.9 | 2025-10-11 | Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58295 | Medium | 5.9 | 2025-10-11 | Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-11586 | High | 8.8 | 2025-10-10 | A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument… |
CVE-2025-61856 | High | 7.8 | 2025-10-10 | A stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT fi… |
CVE-2025-11549 | High | 8.8 | 2025-10-09 | A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component H… |
CVE-2025-61577 | High | 7.5 | 2025-10-09 | D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function. This vulnerabil… |
CVE-2025-47347 | High | 7.8 | 2025-10-09 | Memory corruption while processing control commands in the virtual memory management interface. |
CVE-2025-11528 | High | 8.8 | 2025-10-09 | A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQos. The manipulation of the argument ena… |
CVE-2025-11527 | High | 8.8 | 2025-10-09 | A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_set. Executing a ma… |
CVE-2025-11526 | High | 8.8 | 2025-10-09 | A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation… |
CVE-2025-11525 | High | 8.8 | 2025-10-09 | A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnp… |
CVE-2025-11524 | High | 8.8 | 2025-10-09 | A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument dd… |
CVE-2025-11418 | Critical | 9.8 | 2025-10-08 | A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of… |
CVE-2025-43910 | Low | 2.3 | 2025-10-07 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0… |
CVE-2025-45375 | Medium | 4.4 | 2025-10-07 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0… |
CVE-2025-54402 | High | 8.8 | 2025-10-07 | Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTT… |
CVE-2025-54401 | High | 8.8 | 2025-10-07 | Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTT… |
CVE-2025-54400 | High | 8.8 | 2025-10-07 | Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTT… |
CVE-2025-54399 | High | 8.8 | 2025-10-07 | Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTT… |
CVE-2025-11389 | High | 8.8 | 2025-10-07 | A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of th… |
CVE-2025-11388 | High | 8.8 | 2025-10-07 | A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument… |
CVE-2025-11387 | High | 8.8 | 2025-10-07 | A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_setting_pppoe_set. This manipulation of the… |
CVE-2025-11386 | High | 8.8 | 2025-10-07 | A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter… |
CVE-2025-11328 | High | 8.8 | 2025-10-06 | A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of th… |
CVE-2025-11327 | High | 8.8 | 2025-10-06 | A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipul… |
CVE-2025-11326 | High | 8.8 | 2025-10-06 | A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of… |
CVE-2025-11325 | High | 8.8 | 2025-10-06 | A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppo… |
CVE-2025-11324 | High | 8.8 | 2025-10-06 | A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. S… |
CVE-2025-60663 | High | 7.5 | 2025-10-02 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function. |
CVE-2025-60661 | Medium | 5.3 | 2025-10-02 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function. |
CVE-2025-60662 | High | 7.5 | 2025-10-02 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function. |
CVE-2025-60660 | High | 7.5 | 2025-10-02 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function. |
CVE-2023-28760 | High | 7.5 | 2025-10-02 | TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minid… |
CVE-2025-58776 | High | 7.8 | 2025-10-02 | KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be exe… |
CVE-2025-58775 | High | 7.8 | 2025-10-02 | KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed o… |
CVE-2025-59149 | Medium | 6.2 | 2025-10-01 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In version 8.0.0, rules… |
CVE-2025-11123 | High | 8.8 | 2025-09-28 | A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable cau… |
CVE-2025-11122 | High | 8.8 | 2025-09-28 | A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WAN… |
CVE-2025-59362 | Medium | 4.0 | 2025-09-26 | Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. |
CVE-2025-11012 | Medium | 5.3 | 2025-09-26 | A vulnerability was determined in BehaviorTree up to 4.7.0. This affects the function ParseScript of the file /src/script_parser.cpp of the component Diagnosti… |
CVE-2025-59251 | High | 7.6 | 2025-09-24 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-20352 | High | 7.7 | 2025-09-24 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An a… |
CVE-2025-23339 | Low | 3.3 | 2025-09-24 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to ru… |
CVE-2025-58319 | High | 7.8 | 2025-09-24 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability t… |
CVE-2025-58317 | High | 7.8 | 2025-09-24 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability t… |
CVE-2025-59801 | Medium | 4.3 | 2025-09-22 | In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because the samplesperpixel value is not checked. |