CWE-121: Stack-based buffer overflow
4,134 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 20 of them as exploited in the wild.
- Published CVEs
- 4,134
- Last 12 months
- 1,578
- Critical
- 627
- Known exploited
- 20
Critical 627High 2,695Medium 759Low 53Not scored 0
CVEs per yearBy the year they were published
- 201416
- 20153
- 201718
- 201860
- 201951
- 202059
- 2021197
- 2022169
- 2023333
- 2024898
- 2025882
- 20261,445
Known exploitedNewest addition to KEV first
- CVE-2026-7273
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based,…
Zyxel · GS1900-48HPv2 firmware
ExploitedHigh8.8 - CVE-2021-27137
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote…
DD-WRT · DD-WRT
ExploitedHigh8.1 - CVE-2025-53521
BigIP APM Vulnerability
F5 · BIG-IP
ExploitedCritical9.3 - CVE-2008-0015
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control…
Product not named
ExploitedHigh8.8 - CVE-2025-20352
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An…
Cisco · IOS
ExploitedHigh7.7 - CVE-2025-32756
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1…
Fortinet · FortiNDR
ExploitedCritical9.6 - CVE-2025-42599
Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and…
QUALITIA CO., LTD. · Active! mail 6
ExploitedCritical9.8 - CVE-2025-22457
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before…
Ivanti · Connect Secure
ExploitedCritical9.0 - CVE-2025-0282
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA…
Ivanti · Connect Secure
ExploitedCritical9.0 - CVE-2013-2597
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm…
Product not named
ExploitedHigh8.4
Newest CVEs
- CVE-2026-95867
Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management
IBM · SevOne Network Performance Management
Medium6.7 - CVE-2026-113698
IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
IBM · Db2
Medium6.5 - CVE-2026-17401
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High7.2 - CVE-2026-77708
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions…
SonicWall · SonicOS
Medium5.9 - CVE-2026-112335
Wazuh Agent 1.0.0 before 4.14.9 Stack Buffer Overflow via read_snortfull
wazuh · wazuh
Medium6.8 - CVE-2026-116567
FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
signalwire · freeswitch
High7.5 - CVE-2026-116571
FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction
signalwire · freeswitch
Medium5.9 - CVE-2026-116570
FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication
signalwire · freeswitch
High7.5 - CVE-2026-116572
FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name
signalwire · freeswitch
Medium6.5 - CVE-2026-115928
FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls
signalwire · freeswitch
High7.5