Vulnerabilities (CVE)

Filtered by CWE-121
Total 3797 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-70753 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70747 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70746 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70744 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70656 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70651 1 Tenda 2 Ax1803, Ax1803 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70650 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70648 1 Tenda 2 Ax1803, Ax1803 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70646 1 Tenda 2 Ax1803, Ax1803 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70645 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70644 1 Tenda 2 Ax1806, Ax1806 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-70616 1 Dieboldnixdorf 1 Wnbios64.sys 2026-06-17 N/A 7.8 HIGH
A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058. The vulnerability is caused by missing bounds checking on the user-controlled Options parameter before copying data into a 40-byte stack buffer (Src[40]) using memmove. An attacker with local access can exploit this vulnerability by sending a crafted IOCTL request with Options > 40, causing a stack buffer overflow that may lead to kernel code execution, local privilege escalation, or denial of service (system crash). Additionally, the same IOCTL handler can leak kernel addresses and other sensitive stack data when reading beyond the buffer boundaries.
CVE-2025-70309 1 Gpac 1 Gpac 2026-06-17 N/A 5.5 MEDIUM
A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file.
CVE-2025-70307 1 Gpac 1 Gpac 2026-06-17 N/A 7.5 HIGH
A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
CVE-2025-70305 1 Gpac 1 Gpac 2026-06-17 N/A 5.5 MEDIUM
A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file.
CVE-2025-70304 1 Gpac 1 Gpac 2026-06-17 N/A 7.5 HIGH
A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
CVE-2025-70252 1 Tenda 2 Ac6, Ac6 Firmware 2026-06-17 N/A 7.5 HIGH
An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability.
CVE-2025-70251 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-06-17 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup.
CVE-2025-70250 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-06-17 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup.
CVE-2025-70249 1 Dlink 2 Dir-513, Dir-513 Firmware 2026-06-17 N/A 7.5 HIGH
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizard2.