CWE-121: Stack-based Buffer Overflow vulnerabilities

CVE-2026-81532 is a high-severity stack-based buffer overflow vulnerability in the MongoDB BI Connector ODBC driver. It occurs when a user submits a positioned-cursor SQL statement with a cursor name longer than an internal fixed-length buffer. This causes memory adjacent to the buffer to be overwritten, potentially terminating the hosting application or allowing unintended code execution.

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web_login_first_post handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the web_sys_enablePasswd_post handler copies the enbPass POST parameter into a fixed-size stack buffer without length validation, and the web_sys_localUser_post handler copies the usrName and usrPass POST parameters into fixed-size stack buffers without length validation. A remote authenticated attacker can send a crafted request to crash the CGI process or web management service, resulting in denial of service.

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_radiusSrv*_post family of handlers copies the radKey, radKey_0, radDftParamKey, radName, and radIp POST parameters into fixed-size stack buffers without length validation, and additionally dereferences radName and radIp without verifying their presence in the request. A remote authenticated attacker can send crafted requests to crash the CGI process or web management service, resulting in denial of service.

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation: web_vlan_membership_edit_dialog_post; web_dai_vlan_post; web_poe_alive_rmtip_post; web_sys_sntp_post; web_tool_upgradeManager_post; web_port_countersClr_post; web_rmon_statisticsClr_post; web_cablediag_copper_post; web_aaa_*Authlist* handlers; web_acl_mgmt_Rules_Apply_post; web_acl_mgmt_Rules_Edit_post; web_acl_*AceDel_post handlers; web_acl_*AceAdd/Edit_post handlers; web_acl_bindAdd_post; web_acl_bindEdit_post; web_snmp_v3view_add_post; web_snmp_v3group_add_post; web_snmp_v3community_add_post; web_snmp_v3host_add_post; web_snmp_notifyv3_add_post; web_snmp_v3user_add_post; web_snmpv3_remote_engineId_add_post; web_stp_globalSetting_post; web_isg_db_post; web_tacplus*_post handlers; web_dhcp_option82_post; and web_dhcp_port_option82_cid_post. A remote authenticated attacker can send crafted requests to crash the CGI process or web management service, resulting in denial of service.

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

The Bendix EC80 Brake ECU is affected by a stack-based buffer overflow vulnerability that could allow an attacker to crash the ECU. Exploitation may enable remote code execution or injection of arbitrary CAN bus traffic, potentially disrupting critical vehicle functions such as ABS, steering assist, speedometer, and shifting.

CVE-2026-21807 is a stack-based buffer overflow vulnerability in HCLSoftware BigFix Quantum Risk Analyzer version 2.0.1.47. The binary lacks several critical hardening protections, which could allow an attacker with high privileges to exploit the flaw. The vulnerability has a low CVSS score of 3.9, indicating limited impact and exploitability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild for this vulnerability.

Dell PowerProtect One versions 20.1.0.0 and below contain a stack-based buffer overflow vulnerability (CWE-121). This flaw could be exploited remotely by an unauthenticated attacker to cause a denial of service condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.

A stack buffer overflow vulnerability exists in the GNU C Library (glibc) versions 2.1 through 2.44 due to unchecked stack growth in the tdelete function. This overflow can occur when tdelete is called on a very large tree with at least a million nodes, potentially causing application crashes. No common applications have been identified as affected. Red Hat has released security updates for their hardened images to address this issue.

Adobe Substance 3D Sampler contains a stack-based buffer overflow vulnerability that may allow arbitrary code execution when a user opens a malicious file. Exploitation requires user interaction. The vulnerability has a high severity score of 7.8 but no patch or official remediation has been confirmed yet.

OpenEXR versions 3.4.0 through 3.4.13 contain an out-of-bounds write vulnerability in the HTJ2K-compressed EXR decoding path. This occurs when a crafted EXR file has JPEG 2000 SIZ fields that place the first tile outside the visible image, leading to invalid tile and codeblock geometry in the OpenJPH AVX2 decoder. The flaw can cause a denial of service by crashing the application. The issue is fixed in version 3.4.14.

CVE-2026-17250 is a stack-based buffer overflow vulnerability in the firmware update functionality of TP-Link TL-MR6400 version 7.0. It arises from unsafe handling of attacker-controlled metadata within a firmware image. Exploitation requires authentication and can lead to memory corruption and arbitrary code execution on the device. The vulnerability has a high severity score of 8.5. No patch or official fix information is currently provided.

CVE-2026-17138 is a high-severity stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This vulnerability could allow a remote attacker to execute arbitrary code on the affected systems without requiring user interaction. The vulnerability is due to improper handling of buffer boundaries in the affected software versions.

CVE-2026-16945 is a stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a local attacker with limited privileges to execute arbitrary code on the affected systems. The vulnerability has a high severity rating with a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No public exploits are known at this time, and no official patch or remediation details have been provided.

CVE-2026-63387 is a stack-based buffer overflow vulnerability in libevent prior to versions 2.1.13 and 2.2.2-alpha. The flaw occurs in the evdns.c component when formatting DNS records, allowing a one-byte out-of-bounds write on the stack. This can be triggered by a crafted DNS server response containing certain DNS record types, potentially causing process crashes or memory corruption. The issue is fixed in libevent versions 2.1.13 and 2.2.2-alpha.

CVE-2026-18303 is a stack-based buffer overflow vulnerability in GIMP version 3.2.2 that occurs during the parsing of TIF files. This flaw allows remote attackers to execute arbitrary code by supplying malicious TIF files. Exploitation requires user interaction, such as opening a crafted file. The vulnerability arises from improper validation of the length of user-supplied data before copying it to a stack buffer.

CVE-2026-18297 is a stack-based buffer overflow vulnerability in GStreamer's OGG file parsing component. It allows remote attackers to execute arbitrary code by supplying malicious OGG files. Exploitation requires user interaction, such as opening a malicious file or visiting a crafted webpage. The flaw arises from improper validation of the length of user-supplied data before copying it to a stack buffer.

A stack-based buffer overflow vulnerability exists in the C12.22 protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. This flaw can cause the application to crash, resulting in a denial of service condition.