CWE-121: Stack-based Buffer Overflow vulnerabilities

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and user/password broker authentication is enabled, and CVE-2025-6074 is exploited, the attacker can overflow the buffer for username or password. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older (e.g., v7.3.x, v7.2.x, v7.1.x, etc.).

Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of JSON messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26330.

Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ble_process_esp32_msg function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26369.

A stack-based buffer overflow vulnerability exists in FasterXML jackson-core versions prior to 2.15.0. This occurs when parsing input files with deeply nested data, potentially causing a StackOverflowError. Version 2.15.0 introduces a configurable depth limit (default 1000) to prevent this issue by throwing a StreamConstraintsException when exceeded.jackson-databind also benefits from this fix as it relies on jackson-core for JSON parsing.

An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.

Fuji Electric Smart Editor is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.

A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted malicious cv_object can lead to a arbitrary code execution. An attacker can issue an API call to trigger this vulnerability.

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.

CVE-2025-48060 is a high-severity stack-based buffer overflow vulnerability in jq, a command-line JSON processor. The flaw exists in versions up to and including 1.7.1 in the function jv_string_vfmt, specifically at a malloc call in jv.c line 1456. This vulnerability was discovered via fuzz testing (oss-fuzz). No patched versions are available as of the publication date.

CVE-2025-46398 is a stack-based buffer overflow vulnerability in the xfig diagramming tool, specifically triggered when running the fig2dev utility. The flaw arises from the read_objects function, allowing local input manipulation that can cause memory corruption. This vulnerability has a CVSS score of 5.5, indicating medium severity, and requires local privileges to exploit. The impact includes potential modification of memory integrity without affecting confidentiality or availability. No public exploits or confirmed in-the-wild attacks are reported. No patch or fix version is currently specified by the vendor.

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-30472 is a critical stack-based buffer overflow vulnerability in Corosync up to version 3.1.9. The flaw exists in the orf_token_endian_convert function within exec/totemsrp.c and can be triggered by a large UDP packet if encryption is disabled or the attacker knows the encryption key. This vulnerability allows remote attackers to cause a crash or potentially execute arbitrary code.

CVE-2025-26595 is a stack-based buffer overflow vulnerability in the X.Org xserver and Xwayland components. The flaw exists in the XkbVModMaskText() function, which allocates a fixed-size stack buffer and copies virtual modifier names without checking buffer bounds. This can lead to memory corruption. The vulnerability has a high severity with a CVSS score of 7.8. Red Hat has issued security advisories addressing this and related vulnerabilities with patches available for affected versions.

Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.

CVE-2025-0282 is a critical stack-based buffer overflow vulnerability in Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways. It affects versions before 22.7R2.5, 22.7R1.2, and 22.7R2.3 respectively. This flaw allows a remote unauthenticated attacker to execute arbitrary code remotely. Public exploit code is available, and the vulnerability is known to be exploited in the wild, including use in ransomware campaigns.