CWE-121: Stack-based Buffer Overflow — known CVE vulnerabilities

CVEs classified under CWE-121 (Stack-based Buffer Overflow), ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (50)

• CVE-2026-12848 — CVSS 10.0 (critical): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a…
• CVE-2026-12847 — CVSS 10.0 (critical): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a…
• CVE-2026-12846 — CVSS 10.0 (critical): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a…
• CVE-2026-12485 — CVSS 10.0 (critical): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a…
• CVE-2026-37541 — CVSS 10.0 (critical): Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary…
• CVE-2026-42996: JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed…
• CVE-2017-20230 — CVSS 10.0 (critical): Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed…
• CVE-2025-54328 — CVSS 10.0 (critical): An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200…
• CVE-2012-10058: RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP…
• CVE-2024-36258 — CVSS 10.0 (critical): A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000…
• CVE-2023-3943 — CVSS 10.0 (critical): Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the…
• CVE-2014-9190 — CVSS 10.0 (critical): Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to…
• CVE-2014-0787 — CVSS 10.0 (critical): Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet.
• CVE-2026-6643 — CVSS 9.9 (critical): A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and…
• CVE-2025-22467 — CVSS 9.9 (critical): A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote…
• CVE-2017-16336 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16335 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16334 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16333 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16332 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16331 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16330 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16328 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16327 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16325 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16324 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16323 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16322 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16321 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16320 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16319 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16317 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16316 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16315 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16314 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16313 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16312 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16311 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16310 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16309 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16308 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16307 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16306 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16305 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16304 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16303 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16300 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16299 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16298 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…
• CVE-2017-16297 — CVSS 9.9 (critical): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running…