CWE-562 · Memory Corruption
Return of Stack Variable Address
8CVEs
SortMost likely exploited
8 CVEs with CWE-562 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-21798An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a stack variable to…Gonitro · Nitro Pro · CVSS 8.8 · 2021-09-15 | 8.8 | 21% | 2021-09-15 |
| CVE-2022-41837An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata ca…OpenImageIO Project · OpenImageIO · CVSS 9.8 · 2022-12-23 | 9.8 | 1.7% | 2022-12-23 |
| CVE-2024-4418Libvirt: stack use-after-free in virnetclientioeventloop()Redhat · libvirt · CVSS 6.2 · 2024-05-08 | 6.2 | 0.5% | 2024-05-08 |
| CVE-2020-21686A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm fi…Nasm · Netwide Assembler · 2023-08-22 | – | 0.4% | 2023-08-22 |
| CVE-2026-3591A stack use-after-return flaw in SIG(0) handling code may enable ACL bypassISC · BIND 9 · CVSS 5.4 · 2026-03-25 | 5.4 | 0.4% | 2026-03-25 |
| CVE-2026-26399A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and p…No vendor recorded · CVSS 5.3 · 2026-04-20 | 5.3 | 0.2% | 2026-04-20 |
| CVE-2026-34553iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()InternationalColorConsortium · iccDEV · CVSS 4 · 2026-03-31 | 4.0 | 0.2% | 2026-03-31 |
| CVE-2024-33045Return of Stack Variable Address in BusesQualcomm, Inc. · Snapdragon · CVSS 8.4 · 2024-09-02 | 8.4 | 0.1% | 2024-09-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.