CWE-121: Stack-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the stack.
Also known as Stack Overflow, Stack Buffer Overflow.
A kind of CWE-788 Access of Memory Location After End of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- hewlett packard enterprise hpe nonstop telservHPE NonStop TELSERV - Memory corruption vulnerability5.9 Medium
- hewlett packard enterprise hpe nonstop snmp trap multiplexerHPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability7.5 High
- No product listedA stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to...6.2 Medium
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled9.3 Critical
- juniper networks junos osJunos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service9.2 Critical
- juniper networks junos osJunos OS: MX Series: Certificate-based IKE packets cause root-level code execution9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise9.3 Critical
- juniper networks junos osJunos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used8.7 High
- juniper networks junos osJunos OS: An attacker causes DHCP service disruption during DHCP client operation8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled8.7 High
- juniper networks junos osJunos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised9.3 Critical
- juniper networks junos osJunos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used9.2 Critical
- juniper networks junos osJunos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled8.7 High
- juniper networks junos os evolvedJunos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used9.2 Critical
- hewlett packard enterprise hpe nonstop snmp trap multiplexerHPE NonStop SNMP Trap Multiplexer - Buffer Overflow vulnerability7.5 High
- nlnet labs nsdStack overwrite from specially formatted TXT-DATA RDATA field8.7 High
- nlnet labs nsdStack overwrite from a specially crafted and formatted HIP RR8.7 High
- nlnet labs nsdStack overwrite from a specially crafted and formatted SVCB or HTTPS RR8.7 High
- nlnet labs nsdStack overwrite from specially formatted base64 RDATA field8.7 High
- hewlett packard enterprise hpe nonstop tmf auditread2HPE NonStop TMF Auditread2 - Denial of Service vulnerability6.4 Medium
- microsoft sql server 2022 (gdr), sql server 2022 for x64-based systems (cu27), sql server 2025 for x64-based systems (cu9) +3 more +5 moreMicrosoft SQL Server Remote Code Execution Vulnerability7.5 High
- microsoft sql server 2017 (gdr), sql server 2017 for x64-based systems (cu31), sql server 2019 (gdr) +10 more +12 moreSQL Server Elevation of Privilege Vulnerability8.0 High
- adobe substance 3d designerSubstance3D - Designer | Stack-based Buffer Overflow (CWE-121)5.5 Medium
- adobe substance 3d designerSubstance3D - Designer | Stack-based Buffer Overflow (CWE-121)5.5 Medium
- adobe substance 3d samplerSubstance3D - Sampler | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe substance 3d stagerSubstance3D - Stager | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe substance 3d stagerSubstance3D - Stager | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe dimensionDimension | Stack-based Buffer Overflow (CWE-121)7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Windows Codecs Library Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 moreMicrosoft Office Excel Remote Code Execution Vulnerability8.8 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Remote Code Execution Vulnerability8.8 High
- microsoft exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 14, exchange server 2019 cumulative update 15 +1 more +3 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows GDI+ Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows GDI Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Error Reporting Remote Code Execution Vulnerability8.8 High
- Show moreLoading…