CWE-121: Stack-based buffer overflow
4,103 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 20 of them as exploited in the wild.
- Published CVEs
- 4,103
- Last 12 months
- 1,559
- Critical
- 623
- Known exploited
- 20
Critical 623High 2,676Medium 750Low 53Not scored 1
CVEs per yearBy the year they were published
- 202510
- 202519
- 20259
- 20252
- 20261,209
- 2026886
- 2026453
- 2026228
- 2026115
- 202673
- 202663
- 2026112
Known exploitedNewest addition to KEV first
- CVE-2026-7273
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based,…
Zyxel · GS1900-48HPv2 firmware
ExploitedHigh8.8 - CVE-2021-27137
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote…
DD-WRT · DD-WRT
ExploitedHigh8.1 - CVE-2025-53521
BigIP APM Vulnerability
F5 · BIG-IP
ExploitedCritical9.3 - CVE-2008-0015
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control…
Product not named
ExploitedHigh8.8 - CVE-2025-20352
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An…
Cisco · IOS
ExploitedHigh7.7 - CVE-2025-32756
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1…
Fortinet · FortiNDR
ExploitedCritical9.6 - CVE-2025-42599
Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and…
QUALITIA CO., LTD. · Active! mail 6
ExploitedCritical9.8 - CVE-2025-22457
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before…
Ivanti · Connect Secure
ExploitedCritical9.0 - CVE-2025-0282
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA…
Ivanti · Connect Secure
ExploitedCritical9.0 - CVE-2013-2597
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm…
Product not named
ExploitedHigh8.4
Newest CVEs
- CVE-2026-121249
Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…
Google · Chrome
Critical9.6 - CVE-2026-120752
PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() Callout
PyMuPDF · PyMuPDF
High7.7 - CVE-2026-29508
ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser
ReadyMedia · ReadyMedia (MiniDLNA)
High8.7 - CVE-2026-58966
In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege…
Google · Android
High8.4 - CVE-2026-120067
psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors
PostgreSQL · psqlODBC
Medium5.9 - CVE-2026-120063
psqlODBC stack buffer overflow when quoting long schema and table names
PostgreSQL · psqlODBC
Medium5.9 - CVE-2026-120061
psqlODBC ODBC escape parser stack buffer overflow
PostgreSQL · psqlODBC
High7.5 - CVE-2026-120434
Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPoly
Netpbm · Netpbm
High8.5 - CVE-2026-120433
Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPoly
Netpbm · Netpbm
High8.5 - CVE-2026-120336
VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
VStarcam · O-KAM Client
Medium6.9