CWE-121: Stack-based Buffer Overflow vulnerabilities

CVE-2026-63292 is a stack-based buffer overflow vulnerability in the mod_vhost_alias module of Apache HTTP Server up to version 2.4.68. It occurs when an HTTP request contains a Host header exceeding 8192 bytes, combined with the use of VirtualDocumentRoot with a hostname format specifier and an increased LimitRequestFieldSize setting. This flaw can lead to denial of service or potentially allow remote code execution. The issue is fixed in Apache HTTP Server version 2.4.69.

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead to denial of service.

CVE-2026-47593 is a high-severity stack-based buffer overflow vulnerability in the NVIDIA GPU Display Driver for Windows kernel mode layer. It allows an unprivileged user to perform an out-of-bounds write, potentially leading to code execution, privilege escalation, and denial of service.

CVE-2026-18145 is a stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS. It allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request. The vulnerability affects multiple versions of Fireware OS prior to fixed releases. A high-severity issue with a CVSS score of 8.6, it has been addressed in specific patched versions.

CVE-2026-81433 is a high-severity stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd). It allows an unauthenticated attacker with adjacent network access to execute arbitrary code or cause a denial of service by crashing the process via a specially crafted DHCP packet. Fixed versions are available.

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/do_cmd.js’ endpoint containing an excessively long parameter, which overwrites the PC and RA registers.

A stack-based buffer overflow vulnerability exists in the Catapult DCT2000 protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5.

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.3x before 5.1.*.

CVE-2026-95818 is a stack-based buffer overflow vulnerability in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44. This flaw affects setuid/setgid programs that use DT_RPATH or DT_RUNPATH beginning with $ORIGIN followed by a NUL or '/' character. Exploitation can cause the loader to read and write beyond the bounds of internal buffers, leading to crashes or limited disclosure of process memory. The vulnerability has a low CVSS score of 3.6 and requires local attacker privileges with high attack complexity.

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/out_forward/forward.c secure_forward_pong copies the server-controlled PONG[2] reason into the 32-byte stack buffer msg with memcpy without checking its MessagePack type or length. An attacker who controls or can impersonate an out_forward Secure Forward destination configured with Shared_Key or Empty_Shared_Key can send an oversized reason during the first handshake and overwrite stack control data. Protected builds reliably terminate, while builds without a stack canary or with a disclosure can allow remote code execution as the Fluent Bit process user. When the opt-in --supervisor mode is used, fork-only respawns preserve the canary and address layout, allowing repeated crash-or-survive probes to support code execution on a hardened build; ordinary exec-based or service-manager restarts do not preserve that state. This issue is fixed in version 5.0.8.

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numberofelements value greater than the format maximum of eight. cineoninput::open() uses that unchecked value as the loop bound while filling the fixed strings[8] array, writing pointers beyond the stack buffer and into adjacent state, resulting in memory corruption and denial of service. The affected implementation is identified by src/cineon.imageio/cineoninput.cpp, CineonInput::open(), numberOfElements, and strings[8], which define the relevant source path, functions, state, and trigger. This issue is fixed in versions 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1.

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1 and prior versions.

Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain a stack-based buffer overflow vulnerability. This flaw allows a high privileged attacker with remote access to potentially execute arbitrary code. The vulnerability is identified as CWE-121 and has a CVSS v3.1 score of 7.2, indicating high severity. No known exploits are reported in the wild. A fixed version 11.1.0.3 or later addresses this issue.