Stack-based Buffer Overflow — CVEs by weakness type

Cp450 Firmware HIGH 7.3

CVE-2024-34201

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function.

No fix yet

Fix from $1,950 2024-05-14

Cp450 Firmware MEDIUM 6.5

CVE-2024-34202

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function.

No fix yet

Fix from $1,600 2024-05-14

Dir 619l Firmware MEDIUM 5.7

CVE-2024-33772

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial …

No fix yet

Fix from $1,600 2024-05-14

Unclassified MEDIUM 6.2

CVE-2024-31803

Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT<T>::read_pre_data128_from_file f…

Mitigation only

Fix from $1,600 2024-05-14

Hdf5 CRITICAL 9.8

CVE-2024-29164

HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial o…

Fix: 1.14.4+

Fix from $2,300 2024-05-14

Unclassified MEDIUM 6.3

CVE-2022-32502

An issue was discovered on certain Nuki Home Solutions devices. There is a buffer overflow over the encrypted token parsing logic in the HTTP service…

Mitigation only

Fix from $1,600 2024-05-14

Dap 2622 Firmware HIGH 8.8

CVE-2023-35749

D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adja…

Mitigation only

Fix from $1,950 2024-05-07

Dap 2622 Firmware HIGH 8.8

CVE-2023-35757

D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjac…

Fix: 1.10b03r022+

Fix from $1,950 2024-05-07

Dap 2622 Firmware HIGH 8.8

CVE-2023-35748

D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows n…

Mitigation only

Fix from $1,950 2024-05-07

Dc112a Firmware HIGH 8.8

CVE-2021-34982

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers …

Fix: 1.0.0.46 / 1.0.0.62+

Fix from $1,950 2024-05-07

Multi Protocol Spdz HIGH 7.5

CVE-2024-33782

MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp. This vulne…

No fix yet

Fix from $1,950 2024-05-07

Debian Linux HIGH 8.1

CVE-2024-33599

nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then …

Fix: 2.40+

Fix from $1,950 2024-05-06

Ar8035 Firmware HIGH 7.8

CVE-2024-21474

Memory corruption when size of buffer from previous call is used without validation or re-initialization.

No fix yet

Fix from $1,950 2024-05-06

I21 Firmware HIGH 8.8

CVE-2024-4497

A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been declared as critical. This vulnerability affects the function formexeCommand. The …

Mitigation only