CWE-121 · Stack-based Buffer Overflow (page 9)
Page 9 of 37 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25330 | High | 7.5 | 2026-02-12 | SurfOffline Professional 2.2.0.103 contains a structured exception handler (SEH) overflow vulnerability that allows attackers to crash the application by manip… |
CVE-2019-25329 | High | 7.5 | 2026-02-12 | FTP Navigator 8.03 contains a denial of service vulnerability that allows attackers to crash the application by overwriting Structured Exception Handler (SEH)… |
CVE-2019-25328 | High | 7.5 | 2026-02-12 | XnConvert 1.82 contains a denial of service vulnerability in its registration code input field that allows attackers to crash the application. Attackers can ge… |
CVE-2019-25321 | Critical | 9.8 | 2026-02-12 | FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) re… |
CVE-2019-25319 | Critical | 9.8 | 2026-02-12 | Domain Quester Pro 6.02 contains a stack overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Hand… |
CVE-2019-25318 | High | 8.8 | 2026-02-12 | AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text in… |
CVE-2025-67432 | High | 7.5 | 2026-02-12 | A stack overflow in the ZBarcode_Encode function of Monkeybread Software MBS DynaPDF Plugin v21.3.1.1 allows attackers to cause a Denial of Service (DoS) via a… |
CVE-2020-37200 | High | 7.5 | 2026-02-11 | NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying over… |
CVE-2020-37198 | High | 7.5 | 2026-02-11 | Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the… |
CVE-2020-37184 | Critical | 9.8 | 2026-02-11 | Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbitrary code. Attacke… |
CVE-2020-37183 | Critical | 9.8 | 2026-02-11 | Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structu… |
CVE-2020-37182 | High | 7.5 | 2026-02-11 | Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. A… |
CVE-2020-37181 | Critical | 9.8 | 2026-02-11 | Torrent FLV Converter 1.51 Build 117 contains a stack overflow vulnerability that allows attackers to overwrite Structured Exception Handler (SEH) through a ma… |
CVE-2020-37177 | High | 7.5 | 2026-02-11 | BOOTP Turbo 2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Structured Exception Handler (SEH)… |
CVE-2020-37176 | Critical | 9.8 | 2026-02-11 | Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler… |
CVE-2025-70085 | Critical | 9.8 | 2026-02-11 | An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf to format two filenames (Source1Filena… |
CVE-2025-70083 | High | 7.8 | 2026-02-11 | An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and must be treated as untrusted input. The… |
CVE-2025-48725 | High | 8.1 | 2026-02-11 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then ex… |
CVE-2025-29951 | | 2026-02-10 | A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and a… | |
CVE-2026-22923 | High | 7.8 | 2026-02-10 | A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contains a data validation… |
CVE-2026-22904 | Critical | 9.8 | 2026-02-09 | Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and… |
CVE-2026-22903 | Critical | 9.8 | 2026-02-09 | An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the… |
CVE-2026-2192 | High | 7.2 | 2026-02-08 | A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation… |
CVE-2026-2191 | High | 7.2 | 2026-02-08 | A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos… |
CVE-2026-2187 | High | 8.8 | 2026-02-08 | A vulnerability was found in Tenda RX3 16.03.13.11. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a manip… |
CVE-2026-2186 | High | 8.8 | 2026-02-08 | A vulnerability has been found in Tenda RX3 16.03.13.11. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the a… |
CVE-2026-2185 | High | 8.8 | 2026-02-08 | A flaw has been found in Tenda RX3 16.03.13.11. This issue affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filtering… |
CVE-2026-2181 | High | 8.8 | 2026-02-08 | A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. Per… |
CVE-2026-2180 | High | 8.8 | 2026-02-08 | A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the ar… |
CVE-2020-37161 | Critical | 9.8 | 2026-02-07 | Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name fie… |
CVE-2020-37159 | Critical | 9.8 | 2026-02-07 | Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the ala… |
CVE-2020-37122 | High | 7.5 | 2026-02-07 | SpotFTP-FTP Password Recover 2.4.8 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overf… |
CVE-2020-37095 | Critical | 9.8 | 2026-02-07 | Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structure… |
CVE-2026-2069 | Low | 3.3 | 2026-02-06 | A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of… |
CVE-2026-25727 | Medium | 6.5 | 2026-02-06 | time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 forma… |
CVE-2026-2017 | Critical | 9.8 | 2026-02-06 | A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of… |
CVE-2026-2016 | Medium | 5.3 | 2026-02-06 | A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode of the file… |
CVE-2020-37142 | High | 8.4 | 2026-02-05 | 10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code… |
CVE-2020-37138 | Critical | 9.8 | 2026-02-05 | 10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arb… |
CVE-2020-37136 | High | 7.5 | 2026-02-05 | ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers ca… |
CVE-2020-37133 | High | 7.5 | 2026-02-05 | UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the application. A… |
CVE-2020-37132 | Medium | 6.2 | 2026-02-05 | UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash the applicat… |
CVE-2020-37128 | Medium | 6.2 | 2026-02-05 | ZOC Terminal 7.25.5 contains a script processing vulnerability that allows local attackers to crash the application by loading a maliciously crafted REXX scrip… |
CVE-2020-37127 | Medium | 5.5 | 2026-02-05 | Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcp_release utility that allows attackers to cause a denial of service by supplying exces… |
CVE-2020-37126 | Critical | 9.8 | 2026-02-05 | Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Han… |
CVE-2020-37124 | Critical | 9.8 | 2026-02-05 | B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with cr… |
CVE-2020-37121 | Medium | 5.5 | 2026-02-05 | CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler with cr… |
CVE-2020-37120 | Critical | 9.8 | 2026-02-05 | Rubo DICOM Viewer 2.0 contains a buffer overflow vulnerability in the DICOM server name input field that allows attackers to overwrite Structured Exception Han… |
CVE-2020-37119 | Critical | 9.8 | 2026-02-05 | Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting mem… |
CVE-2026-25584 | High | 7.8 | 2026-02-04 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2… |
CVE-2025-15555 | High | 7.3 | 2026-02-04 | A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-pa… |
CVE-2026-0660 | High | 8.4 | 2026-02-04 | A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage thi… |
CVE-2020-37066 | Critical | 9.8 | 2026-02-03 | GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting malicious input in the File Open URL dialog… |
CVE-2026-25502 | High | 7.8 | 2026-02-03 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2… |
CVE-2025-67187 | Critical | 9.8 | 2026-02-03 | A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/c… |
CVE-2026-24465 | Critical | 9.8 | 2026-02-03 | Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution. |
CVE-2026-1761 | High | 8.6 | 2026-02-02 | A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length ca… |
CVE-2026-1637 | High | 8.8 | 2026-01-29 | A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The man… |
CVE-2025-63658 | High | 7.5 | 2026-01-29 | A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via se… |
CVE-2026-1457 | High | 8.8 | 2026-01-29 | An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution… |
CVE-2020-37013 | High | 8.4 | 2026-01-29 | Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters that allows attackers to execute arbitrar… |
CVE-2020-37001 | High | 8.4 | 2026-01-29 | Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attackers to execute arbitrary code by overfl… |
CVE-2020-37000 | Critical | 9.8 | 2026-01-29 | Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file w… |
CVE-2020-36997 | Critical | 9.8 | 2026-01-29 | BacklinkSpeed 2.4 contains a buffer overflow vulnerability that allows attackers to corrupt the Structured Exception Handler (SEH) chain through malicious file… |
CVE-2020-36971 | High | 8.4 | 2026-01-28 | Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter. Attackers can craft a malicious… |
CVE-2020-36967 | Critical | 9.8 | 2026-01-28 | Zortam Mp3 Media Studio 27.60 contains a buffer overflow vulnerability in the library creation file selection process that allows remote code execution. Attack… |
CVE-2020-36965 | High | 8.4 | 2026-01-28 | docPrint Pro 8.0 contains a local buffer overflow vulnerability in the 'Add URL' input field that allows attackers to execute arbitrary code by overwriting mem… |
CVE-2020-36961 | Critical | 9.8 | 2026-01-28 | 10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code… |
CVE-2025-26386 | | 2026-01-28 | Johnson Controls iSTAR Configuration Utility (ICU) has Stack-based Buffer Overflow vulnerability. This issue affects iSTAR Configuration Utility (ICU) version… | |
CVE-2026-24882 | High | 8.4 | 2026-01-27 | In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. |
CVE-2026-24881 | High | 8.1 | 2026-01-27 | In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-a… |
CVE-2026-22262 | Medium | 5.9 | 2026-01-27 | Suricata is a network IDS, IPS and NSM engine. While saving a dataset a stack buffer is used to prepare the data. Prior to versions 8.0.3 and 7.0.14, if the da… |
CVE-2025-68670 | Critical | 9.1 | 2026-01-27 | xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bou… |
CVE-2025-55095 | Medium | 4.2 | 2026-01-27 | The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition… |
CVE-2026-1361 | High | 7.8 | 2026-01-27 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
CVE-2025-9820 | Medium | 4.0 | 2026-01-26 | A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label l… |
CVE-2026-1425 | Medium | 5.6 | 2026-01-26 | A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_rr_head/_dns_decode_SVCB_HTTPS of the fi… |
CVE-2021-47881 | High | 8.4 | 2026-01-23 | dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd… |
CVE-2026-0792 | Critical | 9.8 | 2026-01-23 | ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… |
CVE-2026-0791 | Critical | 9.8 | 2026-01-23 | ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e… |
CVE-2025-69764 | Critical | 9.8 | 2026-01-22 | Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which… |
CVE-2026-1329 | High | 8.8 | 2026-01-22 | A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipul… |
CVE-2025-69766 | Critical | 9.8 | 2026-01-21 | Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which… |
CVE-2025-69763 | Critical | 9.8 | 2026-01-21 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code exe… |
CVE-2025-69762 | Critical | 9.8 | 2026-01-21 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execu… |
CVE-2025-70648 | High | 7.5 | 2026-01-21 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows attackers to… |
CVE-2025-70646 | High | 7.5 | 2026-01-21 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to ca… |
CVE-2025-70644 | High | 7.5 | 2026-01-21 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause… |
CVE-2025-70651 | High | 7.5 | 2026-01-21 | Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows a… |
CVE-2025-70650 | High | 7.5 | 2026-01-21 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows at… |
CVE-2025-70645 | High | 7.5 | 2026-01-21 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allow… |
CVE-2025-71020 | High | 7.5 | 2026-01-16 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to c… |
CVE-2025-70746 | High | 7.5 | 2026-01-16 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers… |
CVE-2021-47789 | High | 7.5 | 2026-01-16 | Yenkee Hornet Gaming Mouse driver GM312Fltr.sys contains a buffer overrun vulnerability that allows attackers to crash the system by sending oversized input. A… |
CVE-2026-21903 | Medium | 6.5 | 2026-01-15 | A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated w… |
CVE-2025-70307 | High | 7.5 | 2026-01-15 | A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet. |
CVE-2025-70656 | High | 7.5 | 2026-01-15 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers to cause… |
CVE-2025-70309 | Medium | 5.5 | 2026-01-15 | A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file. |
CVE-2025-70305 | Medium | 5.5 | 2026-01-15 | A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file. |
CVE-2025-70304 | High | 7.5 | 2026-01-15 | A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet. |