CWE-562 · 7 records

Return of Stack Variable Address

CVEs in this class

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-41837No exploit	An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.openimageio · openimageio · CWE-562 Pre-auth	Critical9.8	—	1.6%	Dec 22, 2022
37Monitor	CVE-2021-21798No exploit	An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF.gonitro · nitro pro · CWE-562	High7.8	—	21.4%	Sep 15, 2021
31Monitor	CVE-2024-33045No exploit	Return of Stack Variable Address in Busesqualcomm · ar8035 firmware · CWE-562	High7.8	—	0.1%	Sep 2, 2024
24Monitor	CVE-2024-4418No exploit	Libvirt: stack use-after-free in virnetclientioeventloop()red hat · red hat enterprise linux 8 · CWE-562 Local privilege escalation Race condition Denial of service	Medium6.2	—	0.5%	May 7, 2024
22Monitor	CVE-2020-21686No exploit	A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to causenasm · netwide assembler · CWE-562 Denial of service	Medium5.5	—	0.4%	Aug 22, 2023
21Monitor	CVE-2026-26399Proof of concept	A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0.CWE-562	Medium5.3	—	0.1%	Apr 20, 2026
16Monitor	CVE-2026-34553No exploit	iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()color · iccdev · CWE-562	Medium4.0	—	0.2%	Mar 31, 2026

CVE-2022-41837
39Monitor
An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
openimageio · openimageioDec 22, 2022
CVE-2021-21798
37Monitor
An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF.
HighCVSS 7.8No exploitEPSS 21%
gonitro · nitro proSep 15, 2021
CVE-2024-33045
31Monitor
Return of Stack Variable Address in Buses
HighCVSS 7.8No exploitEPSS 0%
qualcomm · ar8035 firmwareSep 2, 2024
CVE-2024-4418
24Monitor
Libvirt: stack use-after-free in virnetclientioeventloop()
MediumCVSS 6.2No exploitEPSS 0%
red hat · red hat enterprise linux 8May 7, 2024
CVE-2020-21686
22Monitor
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
nasm · netwide assemblerAug 22, 2023
CVE-2026-26399
21Monitor
A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0.
MediumCVSS 5.3Proof of conceptEPSS 0%
Apr 20, 2026
CVE-2026-34553
16Monitor
iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()
MediumCVSS 4.0No exploitEPSS 0%
color · iccdevMar 31, 2026